Listen to all interfaces, not just localhost
Add instanceprofile to give access to dynamodb