add warning that AMIs are not patched for recent bash vulnerability