Comment by Throwaway123129

AWS sets CAA records for their domains and thus you can’t issue certs for them