Tag: properly securing an EC2 or RDS instance