Comment by s5fs

To be fair, AWS service teams don't always expose all features/options through cloudformation and you end up having to hit the API to manage them.