search for: elasticache

I''ve seen a couple of examples of using puppet to control services where you can''t run a puppet agent on the resource. As far as I can tell they work by having puppet proxy through some external-service control mechanism, such as fog. The question is: where does the proxy run? I assume a puppet agent needs to run somewhere. Where do you put that agent, how do you configure it,