Yeah it's pretty handy. It also does a lot of the auto-renewal stuff that certbot does for you if you're using Lets Encrypt. More info here https://aws.amazon.com/certificate-manager/?nc1=h_ls