Here is a link the specifications for running Splunk on AWS
As far as the master node, it does not need the high IO that the peers do, because it doesn't actually index any data. I run a quad core with 12G RAM for a master node also serving as a license server, with no issues.
... View more