Ask HN: What's your favorite way to orchestrate AWS?

Specifically the creation and deletion of things like Security Groups, Subnets, etc.

NOT the managing of packages and configuration of the servers themselves (although a good all-in-one solution is even better, I haven't seen one).

I currently use Salt with Salt-Cloud but Salt-Cloud doesn't seem to have all the features CloudFormation does. I wondered if there was something better or all-in-one besides CloudFormation.