Well, would you look at that ... the TLS setup for the @awscloud console still sucks, but at least the fixed the cipher order. Sort of.