I've been trying as much as possible to stick to Packer[1] (create AMI's / Images) and Terraform[2] for executing arbitrary commands and shell scripts. Some may argue this is not truly configuration management because it does not constantly check and maintain desired state.

[1] - https://packer.io

[2] - https://terraform.io