A colleague manually created an AWS security group in the console named 'legacy-web-sg' with ID 'sg-0a1b2c3d4e5f'. You have written a matching `aws_security_group` resource block labeled 'web' in your configuration. You want Terraform to begin managing this existing security group without destroying and recreating it. Which command accomplishes this?