...
$ ansible-playbook -i hosts ec2.yml --private-key=/Users/aheadley/.ssh/annatest.pem --ask-vault-pass
(subsequent runs can be invoked without --private-key since I'm adding keys to the superuser in the ansible scripts)
# cd into the root dir of our code repository
...