Ansible has plenty of cloud modules for AWS. you can describe your whole AWS environment from VPC , Security Groups, Routing tables, etc. You might not be able

Ansible has plenty of cloud modules for AWS. you can describe your whole AWS environment from VPC , Security Groups, Routing tables, etc. You might not be able to find everything but you can also use the AWS Cli to handle IAM roles and user permissions. You have to use a mix of both Ansible and plain AWS Cli to achieve your goal.