Must be launched manually
per their docs: "NOTE: At this time, this product instance must be launched using the "Launch with EC2 Console" option."
This flies in the face of everything devops. You can't automate it. I am forced to use this by our secops team. If it were up to me, this alone would be a showstopper.