* crummy string/set comparison first, come back later to something more involved
* building rule-maps from the config and aws response
* appears that the aws rules aren't being generated correctly