I use the console to manage S3 buckets and credentials in IAM. EC2 instances are provisioned via Rancher.