add to default security group
comment
create-stack -> update-stack
zookeeper boxes don't need public IPs