working prototype, if only I could grok ec2 vpc to create the requisite interfaces :-/