Use an HVM AMI with enhanced networking enabled.

This has the "sriov" flag turned on.  See here for more details:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking.html