I think it would be very valuable to describe how to engineer your NAT instance(s) for VPC to eliminate single points of failure. An Amazon Engineer at ReInvent mentioned you can now use elastic network interfaces and a heartbeat mechanism to automatically failover from a failed NAT instance to a hot standby, but I think the subject deserves a more elaborate treatment (and discussion...)