strange behavior of security groups

Summary

When I created a machine with multiple network ports everything worked as expected, but when I executed my playbook again, I was unable to access my machine. Further investigation showed, that security groups from my ports were removed, so SSH connection was not possible.

Steps to reproduce

1. Create 2 network ports with different sets of security groups.
2. Create VM with these ports.
3. Execute playbook again.

Expected behavior

At the first run of playbook ports and vm are created, at the second run nothing changes.

Actual behavior

After first run everything works as expected, but second run removes all security groups from ports.