Comment by dashdashu

domain name being arguably the most difficult thing here as it requires some interaction for at least payment. Certificates you can fully automate nowadays with LetsEncrypt and certbot or even managed by AWS no problem