[statictype]

Wait - AWS has a service to generate wild card Certs that can be attached to ELB?

Did not realise this was a thing

[zwily]

Yes, and they automatically renew. It's fantastic. If you're using ELB/ALB, it's by far the easiest way to do SSL.

The only downside is that initial setup of a certificate requires email confirmation, so if you need to provision a lot, LE may still win.

[zob_cloud]

And they're free! Although only can be used on AWS services, currently ELB and CloudFront. https://aws.amazon.com/certificate-manager/