After an Amazon VPC instance is launched, can I change …

After an Amazon VPC instance is launched, can I change the VPC security groups it belongs to?

A.
Only if the tag “VPC_Change_Group” is true

B.
Yes. You can.

C.
No. You cannot.

D.
Only if the tag “VPC Change Group” is true