[jimwalsh]

Use the Console to spot check things. But beyond that, the majority of your work in AWS should be scripted using the various APIs. At that point, using federated access or a proper IAM strategy makes that fairly painless.