I wrote this blog post because all the examples I found on the web seemed to be pretty much rehashes of the Amazon docs and didn't really go into configuring the environment in a secure way that you could use in production.