[aws] support creating services in aws

[kerthcet]

What would you like to be added:

Why is this needed:

It should expose an endpoint for connection, also solving the authentication problem, which is harder than a sandbox only. For sandbox, we can use a websocket for building connections. And the instances don't need to expose endpoint or ports.

Completion requirements:

This feature requires the following artifacts:

• Design doc
• API change
• Docs update

The artifacts should be linked in subsequent comments.

[kerthcet]

/close