I got to say AWS Certificate Manager is a game changer -- it took me 5 min to secure two domains. Last time I did it, buying a certificate and converting to work with AWS took about four hrs.