Right, all of the other TLS plugins expect to hit endpoints under your control ;) but the annoyance of AMZ changing is tolerable for now