Update instance tags to match new scheme.
Add the worker to the elasticache security group.
VPC DNS and Elasticache support

I hope this helps cleaning up a bit.
Corrections and fixes to match what the manual command used to do.
Fix cache references and correct subnet names.
Remove EdxServerUser since we have IAM roles setup for all application instance types.