How does meta-aws use the Security Group IDs passed to it?

Docker for AWS
1

We pass 3 environment variables to the meta-aws service running on manager and worker nodes.

AWS_REGION
MANAGER_SECURITY_GROUP_ID
WORKER_SECURITY_GROUP_ID

How does the meta-aws container use these variables?