Only first security group used to check for ingress rules

[donny-dont]

If multiple security groups are being assigned to the instance and the first security group does not have ingress rules the instance will fail with the following error.

provision: failed to create instance: security group XXXXXX does not have the correct ingress rules. There is no rule for port 9079

The code in amazon/driver.go only checks the first security group.

	// check the security group ingress rules
	rulesErr := checkIngressRules(ctx, client, p.groups[0])
	if rulesErr != nil {
		return nil, rulesErr
	}

It looks like this should work if the function checkIngressRules took multiple group identifiers

func checkIngressRules(ctx context.Context, client *ec2.EC2, groupID string) error {
	input := &ec2.DescribeSecurityGroupsInput{
		GroupIds: []*string{aws.String(groupID)},
	}