diff --git a/builtin/providers/aws/resource_aws_instance.go b/builtin/providers/aws/resource_aws_instance.go
index 3874af81a..bf7598e11 100644
--- a/builtin/providers/aws/resource_aws_instance.go
+++ b/builtin/providers/aws/resource_aws_instance.go
@@ -371,6 +371,7 @@ func resourceAwsInstanceCreate(d *schema.ResourceData, meta interface{}) error {
 			AssociatePublicIPAddress: aws.Boolean(associatePublicIPAddress),
 			DeviceIndex:              aws.Long(int64(0)),
 			SubnetID:                 aws.String(subnetID),
+			Groups:                   groups,
 		}
 
 		if v, ok := d.GetOk("private_ip"); ok {