- add support to create a private instance with this module - add conditionals to not assign a public IP - add conditional to make the instance not accessible with a SSH tunnel