I find this annoying. I'd like to use U2F for my AWS accounts, but it seems like the drawbacks are pretty hard to deal with.

With TOTP, you could still use API keys to interact with the API. Is that also true of U2F?