Description of problem:
We would like to address 2 topics with using "golden" images for slave nodes:
- Ensure that only verified images may run in our AWS account. On such a verified image, the Ansible user should either not be necessary, or not run as root. To achieve this, we feel it's probably easiest to have only some minor re-configurations performed by a AWS init script (http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AmazonLinuxAMIBasics.html#CloudInit).
- Use this golden image to instantiate EC2 instances via autoscaling groups.
Some upstream work has been done at: