break AWS-specific stuff out into its own template