Added support for VPC
Improved support for regions to specify auth tokens directly instead of requiring IAM rights
Improved error reporting when rules don't match by calling out the order of grants within a rule