func getDefaultNetworkAcl(vpc_id string, ec2conn *ec2.EC2) (defaultAcl *ec2.NetworkACL, err error) {
	resp, err := ec2conn.DescribeNetworkACLs(&ec2.DescribeNetworkACLsRequest{
		NetworkACLIDs: []string{},
		Filters: []ec2.Filter{
			ec2.Filter{
				Name:   aws.String("default"),
				Values: []string{"true"},
			},
			ec2.Filter{
				Name:   aws.String("vpc-id"),
				Values: []string{vpc_id},
			},
		},
	})

	if err != nil {
		return nil, err
	}
	return &resp.NetworkACLs[0], nil
}
func findNetworkAclAssociation(subnetId string, ec2conn *ec2.EC2) (networkAclAssociation *ec2.NetworkACLAssociation, err error) {
	resp, err := ec2conn.DescribeNetworkACLs(&ec2.DescribeNetworkACLsRequest{
		NetworkACLIDs: []string{},
		Filters: []ec2.Filter{
			ec2.Filter{
				Name:   aws.String("association.subnet-id"),
				Values: []string{subnetId},
			},
		},
	})

	if err != nil {
		return nil, err
	}
	for _, association := range resp.NetworkACLs[0].Associations {
		if *association.SubnetID == subnetId {
			return &association, nil
		}
	}
	return nil, fmt.Errorf("could not find association for subnet %s ", subnetId)
}