consistently format playbooks
change security group name
set explicit VPC subnet
add private DNS names of new EC2 hosts to route53