There are way better examples than this, such as the checkbox on Elastic Beanstalk that makes you decide whether to give your application a public IP. This chec

There are way better examples than this, such as the checkbox on Elastic Beanstalk that makes you decide whether to give your application a public IP. This checkbox would default to false, and in most sensible configurations would cause Elastic Beanstalk to be unable to reach the application VM. The amount of similar things on AWS (options that literally make the thing unusable if set a certain way) is astronomical, and often for simple things the documentation is non-existent or requires you to custom-configure IAM via xml. Oof.