Chef-provisioning - AWS security group rules - Mix!?

Chef Infra (archive)
1

Hi All

Can anyone help me with referencing lazy and “non-lazy” inbound rules for a security group. It seems to want one, or the other. Not both.

  solr_sg = aws_security_group 'solr-vpc' do
    vpc lazy { my_vpc.aws_object.id }
    inbound_rules '1.2.3.4/32'                => [ 22, 80, 1099, 3000, 8983..8990 ]
                  lazy  {         
                          {solr_sg.aws_object.id    => [ 8983..8990 ]}
                          {chef_sg.aws_object.id    => [ 443 ]}
                        }

Currently, the ports for 1.2.3.4 get opened, but not the lazy ones. Can a mix of lazy, and non lazy be done?

Many thanks
Mark