Create custom Ubuntu AMIs the hard (secure) way