It's possible. Security on AWS can certainly be tricky. It's safer to use ElasticBeanstalk if you don't feel confident in your security knowledge, since it manages keys and IAM roles for you.