notes
cover ec2 certificates