Couple comments that weren't in the docs that might help others:
1. Make sure your manager is configured using the Elastic IP in SmartConsole (not the private one by default), otherwise the gateways that spin up won't associate with the management. Also make sure the Elastic IP is an alias on your interface (in Gaia).
2. If you use a different name for your manager (i.e. other than R80Mgmt) you may need to change CheckMates-aws-vpc-create.yml to match as this will mean the tags the vSEC controller is looking for are different.
