aws fails to return instances when filtering on security group-id

aws-cli.debug

$ aws ec2 describe-instances --filter file://filters/elasticsearch.json --debug
2014-03-12 18:01:59,468 - awscli.clidriver - DEBUG - CLI version: aws-cli/1.3.1 Python/2.7.6 Darwin/13.1.0, botocore version: 0.35.0
2014-03-12 18:01:59,468 - botocore.service - DEBUG - Creating service object for: ec2
2014-03-12 18:01:59,468 - botocore.base - DEBUG - Attempting to load: aws/ec2
2014-03-12 18:01:59,536 - botocore.base - DEBUG - Found data file: /usr/local/Cellar/python/2.7.6/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/botocore/data/aws/ec2.json
2014-03-12 18:01:59,536 - botocore.hooks - DEBUG - Event service-data-loaded.ec2: calling handler <function signature_overrides at 0x10bc81a28>
2014-03-12 18:01:59,536 - botocore.hooks - DEBUG - Event service-created: calling handler <function register_retries_for_service at 0x10bc81848>
2014-03-12 18:01:59,536 - botocore.handlers - DEBUG - Registering retry handlers for service: Service(ec2)
2014-03-12 18:01:59,536 - botocore.service - DEBUG - Creating operation objects for: Service(ec2)
2014-03-12 18:01:59,543 - botocore.hooks - DEBUG - Event building-command-table.ec2: calling handler <functools.partial object at 0x10bf348e8>
2014-03-12 18:01:59,543 - awscli.customizations.removals - DEBUG - Removing operation: import-instance
2014-03-12 18:01:59,543 - awscli.customizations.removals - DEBUG - Removing operation: import-volume
2014-03-12 18:01:59,543 - botocore.operation - DEBUG - Creating parameter objects for: Operation:DescribeInstances
2014-03-12 18:01:59,544 - awscli.clidriver - DEBUG - OrderedDict([(u'dry-run', <awscli.arguments.BooleanArgument object at 0x10c426c10>), (u'no-dry-run', <awscli.arguments.BooleanArgument object at 0x10c426c50>), (u'instance-ids', <awscli.arguments.ListArgument object at 0x10c426c90>), (u'filters', <awscli.arguments.ListArgument object at 0x10c426cd0>), (u'next-token', <awscli.arguments.CLIArgument object at 0x10c426d10>), (u'max-results', <awscli.arguments.CLIArgument object at 0x10c426d50>)])
2014-03-12 18:01:59,544 - botocore.hooks - DEBUG - Event building-argument-table.ec2.describe-instances: calling handler <function _rename_arg at 0x10bf3b500>
2014-03-12 18:01:59,544 - botocore.hooks - DEBUG - Event building-argument-table.ec2.describe-instances: calling handler <function _rename_arg at 0x10bf3b578>
2014-03-12 18:01:59,544 - botocore.hooks - DEBUG - Event building-argument-table.ec2.describe-instances: calling handler <functools.partial object at 0x10bf34998>
2014-03-12 18:01:59,544 - botocore.hooks - DEBUG - Event building-argument-table.ec2.describe-instances: calling handler <function unify_paging_params at 0x10beaec08>
2014-03-12 18:01:59,544 - awscli.customizations.paginate - DEBUG - Modifying paging parameters for operation: Operation:DescribeInstances
2014-03-12 18:01:59,545 - botocore.hooks - DEBUG - Event operation-args-parsed.ec2.describe-instances: calling handler <functools.partial object at 0x10c381f18>
2014-03-12 18:01:59,546 - botocore.hooks - DEBUG - Event operation-args-parsed.ec2.describe-instances: calling handler <functools.partial object at 0x10c381ec0>
2014-03-12 18:01:59,546 - botocore.hooks - DEBUG - Event load-cli-arg.ec2.describe-instances: calling handler <function uri_param at 0x10be9faa0>
2014-03-12 18:01:59,546 - botocore.hooks - DEBUG - Event process-cli-arg.ec2.describe-instances: calling handler <awscli.argprocess.ParamShorthand object at 0x10bf32dd0>
2014-03-12 18:01:59,546 - awscli.argprocess - DEBUG - Param filters looks like JSON, not considered for param shorthand.
2014-03-12 18:01:59,546 - awscli.arguments - DEBUG - Unpacked value of "['file://filters/elasticsearch.json']" for parameter "filters": [OrderedDict([(u'Name', u'tag:stage'), (u'Values', [u'development'])]), OrderedDict([(u'Name', u'group-id'), (u'Values', [u'sg-<-REDACTED->'])])]
2014-03-12 18:01:59,546 - botocore.credentials - INFO - Found credentials in Environment variables.
2014-03-12 18:01:59,546 - botocore.hooks - DEBUG - Event creating-endpoint.ec2: calling handler <function maybe_switch_to_sigv4 at 0x10bc819b0>
2014-03-12 18:01:59,557 - botocore.operation - DEBUG - Operation:DescribeInstances called with kwargs: {u'filters': [OrderedDict([(u'Name', u'tag:stage'), (u'Values', [u'development'])]), OrderedDict([(u'Name', u'group-id'), (u'Values', [u'sg-<-REDACTED->'])])]}
2014-03-12 18:01:59,558 - botocore.parameters - DEBUG - Building parameter for query service, name: u'Filters', label: ''
2014-03-12 18:01:59,558 - botocore.parameters - DEBUG - Building parameter for query service, name: u'Values', label: u'Filter.1.{label}'
2014-03-12 18:01:59,558 - botocore.parameters - DEBUG - Building parameter for query service, name: u'Values', label: u'Filter.2.{label}'
2014-03-12 18:01:59,558 - botocore.endpoint - DEBUG - Making request for Operation:DescribeInstances (verify_ssl=True) with params: {u'Filter.2.Name': u'group-id', u'Filter.2.Value.1': u'sg-<-REDACTED->', u'Filter.1.Value.1': u'development', u'Filter.1.Name': u'tag:stage'}
2014-03-12 18:01:59,558 - botocore.auth - DEBUG - Calculating signature using v2 auth.
2014-03-12 18:01:59,558 - botocore.auth - DEBUG - String to sign: POST
ec2.us-east-1.amazonaws.com
/
AWSAccessKeyId=<-REDACTED->&Action=DescribeInstances&Filter.1.Name=tag%3Astage&Filter.1.Value.1=development&Filter.2.Name=group-id&Filter.2.Value.1=sg-<-REDACTED->&SecurityToken=<-REDACTED->&SignatureMethod=HmacSHA256&SignatureVersion=2&Timestamp=2014-03-12T23%3A01%3A59.558530&Version=2013-10-15
2014-03-12 18:01:59,563 - botocore.endpoint - DEBUG - Sending http request: <PreparedRequest [POST]>
2014-03-12 18:01:59,563 - botocore.vendored.requests.packages.urllib3.connectionpool - INFO - Starting new HTTPS connection (1): ec2.us-east-1.amazonaws.com
2014-03-12 18:01:59,757 - botocore.vendored.requests.packages.urllib3.connectionpool - DEBUG - "POST / HTTP/1.1" 200 None
2014-03-12 18:01:59,759 - botocore.response - DEBUG - Content type from response: text/xml
2014-03-12 18:01:59,759 - botocore.response - DEBUG - Response Headers:
transfer-encoding: chunked
date: Wed, 12 Mar 2014 23:01:58 GMT
content-type: text/xml;charset=UTF-8
server: AmazonEC2
2014-03-12 18:01:59,759 - botocore.response - DEBUG - Response Body:
<?xml version="1.0" encoding="UTF-8"?>
<DescribeInstancesResponse xmlns="http://ec2.amazonaws.com/doc/2013-10-15/">
    <requestId><-REDACTED-></requestId>
    <reservationSet/>
</DescribeInstancesResponse>
2014-03-12 18:01:59,760 - botocore.hooks - DEBUG - Event needs-retry.ec2.DescribeInstances: calling handler <botocore.retryhandler.RetryHandler object at 0x10c3c73d0>
2014-03-12 18:01:59,760 - botocore.retryhandler - DEBUG - No retry needed.
2014-03-12 18:01:59,760 - botocore.hooks - DEBUG - Event after-call.ec2.DescribeInstances: calling handler <awscli.errorhandler.ErrorHandler object at 0x10bf32e10>
2014-03-12 18:01:59,760 - awscli.errorhandler - DEBUG - HTTP Response Code: 200
{
    "Reservations": []
}