And also, If shit really hits the fan, its not a bad idea to make sure you have a OpenVPN tunnel ready on each server. This will allow to get connectivity bet

And also, If shit really hits the fan, its not a bad idea to make sure you have a OpenVPN tunnel ready on each server. This will allow to get connectivity between old and new instances if you can't update the security groups due to the API being down.