opscode/kitchen-ec2 — pull request #15 by eherot (2013-09-11 19:37:55+00:00)
Title: In VPC groups must be specified by setting :security_group_ids rather than :groups

This is backwards compatible with non-VPC hosts so, for simplicity's sake, it probably makes sense to just do it this way.