[synack]

I have an ansible playbook that does "git pull" in the right directory and restarts the daemon. I run it whenever I need code deployed, but it wouldn't be difficult to rig up to a CI system.

The EC2 instances are managed by terraform. Debian AMIs with a cloud-init script to get them bootstrapped with ssh keys and such to the point where ansible can run.

Yes, there are better options but with a team size of < 5, this works fine and there's really not much that can go wrong with it.