Seems that my previous post was lost somewhere. So I want to ask again: is there some way to map ec2 instance to multiple security groups?
If not, please approve my pull request: https://github.com/ansible/ansible/pull/3171
To not to break compability I've added new field called "groups" which takes list of security groups to map instance to.