I feel like the harder part of that would be migrations on databases and application code deploys. CloudFormation to configure VPCs would probably work fine. I

I feel like the harder part of that would be migrations on databases and application code deploys. CloudFormation to configure VPCs would probably work fine. If you're going to do that, though, you may as well do CloudFormation into customer VPCs and let them do all the "paying Amazon".