Holy crap @awscloud-issued SSL certs are easy. Hardest part of getting one issued was realising the verification email had gone to spam.