production first pass on EC2 and RDS