anchor.diff:  
   To configure your AWS account for MicroBOSH:
   
  -* [Obtain AWS credentials](#credentials)
  +* (**Optional**) [Obtain AWS credentials](#credentials)
   * [Create a Key Pair](#create-key-pair)
   * [Create a Virtual Private Cloud](#create-vpc)
   * [Create an Elastic IP](#create-eip)
  
positive.code: 
  1. Run `bosh download public stemcell STEMCELL-NAME`to download a stemcell.
  
  BOSH stemcell names include the type, BOSH build number, target IaaS and hypervisior, and underlying operating system.
  
      To download the latest light Ubuntu Trusty stemcell:
  
      <pre class='terminal'>
      $ bosh download public stemcell light-bosh-stemcell-2717-aws-xen-ubuntu-trusty-go_agent.tgz
  </pre>
  
  ## <a id="deploy"></a>Step 4: Deploy MicroBOSH ##
  
  
negative.code: 
  1. Add the following rules for access by MicroBOSH and BOSH.
  
      MicroBOSH needs ports 25555 (BOSH Director), 6868 (BOSH Agent), and 22 (SSH to
  debug) opened for inbound traffic, and VMs that BOSH deploys might need access to all TCP and UDP ports from within the same Security Group.
  
  
  