Feanil/vpc play

@e0d @jarv 
The comment should have been updated, there is a network ACL created but getting and changing it was not straight forward also it was the default one which in the past we've left alone.  So the approach I ended up going with is to create a new ACL that is explicitly public.  The Default ACL can only communicate within the VPC which I thought was a safe way to leave things in case we accidentally create infrastructure that uses the default ACL it doesn't immediately get exposed to the world.