add instance options
add a non-aws way to take in the ssl cert
add policy attributes