diff --git a/README.md b/README.md
index 31bbf8cd..cc7b3a83 100644
--- a/README.md
+++ b/README.md
@@ -142,9 +142,10 @@ This provider exposes quite a few provider-specific configuration options:
   to an existing Elastic IP address, assign the address to the instance.
 * `region` - The region to start the instance in, such as "us-east-1"
 * `secret_access_key` - The secret access key for accessing AWS
-* `security_groups` - An array of security groups for the instance. If this
-  instance will be launched in VPC, this must be a list of security group
-  Name. For a nondefault VPC, you must use security group IDs instead (http://docs.aws.amazon.com/cli/latest/reference/ec2/run-instances.html).
+* `security_groups` - An array of one or more security groups for the instance. If the 
+  instance will be launched in a default VPC, you must specify the security groups by Group Name.
+  If the instance will be launched in a nondefault VPC, you must specify the security groups by Group ID 
+  (see Options --security grpus at http://docs.aws.amazon.com/cli/latest/reference/ec2/run-instances.html).
 * `iam_instance_profile_arn` - The Amazon resource name (ARN) of the IAM Instance
     Profile to associate with the instance
 * `iam_instance_profile_name` - The name of the IAM Instance Profile to associate