Using SSH options like ProxyCommand, Ansible can readily work with privately addressed EC2 instances on a AWS VPC subnet.
When I used the Ansible service module to enable a daemon, all entries in rc.conf.local related to that service were removed, including the flags entry.
An example of how I use Ansible config management to save and reproduce the environment on my laptop.
How to use the Ansible configuration management systems to easily reproduce a heavily customized environment on other laptops down the line.
I wanted to use Ansible to manage my main development environment at home, with a home directory set up in git.