Services use environment variables for config

Old versions of the service module would render a config template with variables you provided, and then store the rendered template somewhere in S3 – then applications would have to implement their own logic for fetching and parsing that file.

This had the side effect that all applications had complete read access to your S3 buckets, which is potentially undesirable.

The new version of the service module passes config as environment variables instead.