By leveraging CI in GitLab we were able to deploy CloudFormation templates as soon as commits occurred.
All deployments use CloudFormation Change Sets which allow for separation of duty.
CloudFormation combined with GitLab meant we were able to remove much of the manual configuration of AWS services.
Tell me what you're trying to do on AWS and what "good" would look like. I'll come back with how I'd approach it.