The AEM OpenCloud default log dir /var/log/shinesolutions & default tmp dir has read & execution permissions for others. To avoid any exposure of sensible information to unauthorized users we should update the permissions to 0770 when creating the dirs.
https://github.com/shinesolutions/aem-aws-stack-provisioner/blob/master/manifests/pre-common.pp#L71-L89