SecurityGroups do not have a Name tag

In the terrafrom README.md this command does not work.

 # Get Bastion Security Group ID
 export BSG=`aws ec2 describe-instances --filters "Name=tag:Name,Values=$CNAME-bastion" --query 'Reservations[*].Instances[*].SecurityGroups[*].GroupId' --output text`

the terraform does not create the SecurityGroups with a Name tag. The EC2 instances have Name tag but the SecurityGroups don't. After manually adding Name tag to the bastian security group the command worked.