diff --git a/builtin/providers/aws/resource_aws_security_group.go b/builtin/providers/aws/resource_aws_security_group.go
index f6bf85035..2350a5c12 100644
--- a/builtin/providers/aws/resource_aws_security_group.go
+++ b/builtin/providers/aws/resource_aws_security_group.go
@@ -183,9 +183,13 @@ func resource_aws_security_group_validation() *config.Validator {
 	return &config.Validator{
 		Required: []string{
 			"name",
+			"ingress.*",
+			"ingress.",
 		},
 		Optional: []string{
 			"description",
+			"vpc_id",
+			"owner_id",
 		},
 	}
 }