Transform the PrivateIpAddresses element in the NetworkInterfaces parameter to RunInstances to have an xmlname of PrivateIpAddresses rather than PrivateIpAddressesSet.  This should eventually be fixed in the source JSON model.
Fix tab in JSON file.