Split from #158. Some questions: - [ ] `service`: are there any problems with this being e.g. `aws-codedeploy-hook-BeforeAllowTraffic` across all deployments? - [ ] `tier`: should we configure e.g. `tin` at the payload level, or leave it to external (LogCentral) configuration?
