Cloud Custodian - Check load balancers (ELB's) if it has any of its attached security groups is not from the allowed list

Question

I need to write a cloud custodian policy where the policy needs to validate the attached security groups to the elb\'s from the SG\'s list.

I am using below policy fi