I'd do that, but my DNS is via route 53. Blocking AWS would block my ability to manage DNS automatically as well as certificate issuance via DNS-01.
Regardless, it sucks that you have to deal with this. The fact that you’re a customer makes it all the more absurd.