Thanks for showing interest. The service doesn't use AWS to auto-generate SSL for custom domains, it uses a dedicated instance of Open Resty with LetsEncrypt.