anchor.diff:  
   su -l -c "cd /var/lib/tomcat/bin && /var/lib/tomcat/bin/updateProperties.sh $DB_PROPS $KB_PROPS" tomcat
   ```
  -First, you need to edit the database properties. DB_SERVER should be set to the full name of the DB instance, as given in the `Connectivity and Security` panel (see above). THe port number 3306 is required. DB_USER and DB_PASSWORD should be set to the administrator credentials you have chosen for the RDS instance.
  -
  -Second, you may optionally edit any Kill Bill properties that you need to change from the standard defaults.
  +First, you need to edit the database properties. DB_SERVER should be set to the full name of the DB instance, as given in the `Connectivity and Security` panel (see above). The port number 3306 is required. DB_USER and DB_PASSWORD should be set to the administrator credentials you have chosen for the RDS instance.
  +
  +Second, you may optionally edit any https://docs.killbill.io/latest/userguide_configuration.html [Kill Bill properties] that you need to change from the standard defaults.
   
   [3] Launch the EC2 instances
   
  
positive.code: 
  [5] Stop and Restart the KillBill Service
  
  IS THIS NECESSARY? IF SO SHOULD IT BE DONE ON ALL INSTANCES?
  
  ```
  > sudo service killbill stop
  
negative.code: 
  [2]. You could get a message like:
  
  `Error creating new order : Cannot issue for ec2-18-234-168-57.compute-1.amazonaws.com: The ACME server refuses to issue a certificate for this domain name, because it is forbidden by policy`
  
  This could happen if you have tried to use your public DNS name directly as your CNAME, which is not allowed.
  
  