E0d/s3 log perms

@jarv @feanil @fredsmith  

related to https://openedx.atlassian.net/browse/DEVOPS-291.  Includes some general re-factoring too.  I'd like to fixate on this service directory creation pattern if you like it.

Still need to test on my sandbox.
I have another branch in the works that will pull this stuff up further, I wanted to make this better without fixing everything.