Here's hoping that they add support for S3 soon. It's a shame that it's so difficult to leverage IAM Roles to bootstrap an instance. The very latest boto is the only tool I know of that supports S3 fetching using the STS credentials that you get from a Role.