vpc_zone_identifier should be a list as per the docs