After a lot of work, I have finally managed to use CloudFront and OpsWorks to set up two servers running a Rails app on a private subnet behind a bastion server with RDS as a database and a load balancer up front.

That sucked.