Simple ec2 security groups is not enough because we also run an arbitrary code execution service (dynos)