change push-latest-rrd to match env/service/role style; /issue #317
refactoring security group configuration /issue #319
being more strict about availability zones