Secure EC2

Main Objective- As an admin/manager of project I want to allocate one VM/Env (complete development env)to one of the developers on which he can work and checkin his code to git hub branch, test it's deployment on local server within [login to view URL] probably single microservice or stripped-down version of the website. But he should not be able to send this code to the outside world either through email or any hack. All configuration changes to made EC2 secure should be documented very well. Min things required on this env should Python and it's IDE, postgress database,Tomcat server,DJango Framwork. Detailed assumption :- 1)Developer should be able to checkin and checkout code to branch in github [login to view URL] repo should not be public and it's code should not be accessible to outside world at any cost. 2)Developer should be able to dowload libraries by some workaround or tempporary permission but not vice versa. 3)VM should have IDE like Intellij or Pycharm installed for normal pyhon developer to work and developement of DJango related services should be possible. 4)He should be able to hit API deplyed on other/external systems. 5) Any kind of email should not open inside VM. 6)Net should be restricted but should not create hindrance in normal working of developer. 7)All required configuration should be very documented with screenshots. 8)This should be possible in least budget. 9)Any other assumptions from your end??