After an Amazon VPC instance is launched, can I change …

After an Amazon VPC instance is launched, can I change the VPC security groups it belongs to?

A.
No. You cannot.

B.
Yes. You can.

C.
Only if you are the root user

D.
Only if the tag “VPC_Change_Group” is true