That's a great idea, thank you. We are planning to add import/export to CloudFormation anyway, but what you are suggesting sounds like we wouldn't even have to ask for any credentials (as long as the user isn't using custom AMIs/SnapShots) and could be a good introduction. I will think about this more, thanks a lot!