* If you feel curious you can see what other metadata you can get via http://169.254.169.254 here: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instancedata-data-retrieval.html
* Move www to ops345sgprivate, and add port 80 from ops345sg as a second inbound rule there.