We do something similar for our apps on ec2. We use userdata to configure our ami, which then connects to our puppetmaster with the node details and everything

We do something similar for our apps on ec2. We use userdata to configure our ami, which then connects to our puppetmaster with the node details and everything happens like magic (ssl certs, web adresses, databases, web apps, security, users etc).