You can still automate Let's Encrypt even if your system requires a DNS challenge. Using these PowerShell scripts and Amazon Web Services' DNS service Route 53 will do the trick.

Brien Posey explains how to address problems caused when your EC2 instances happen to be in a different region from the one that AWS Tools for PowerShell is configured to use.

AWS has created a PowerShell cmdlet named New-EC2Tag that exists specifically for this purpose. As is the case with most PowerShell cmdlets, there are a large number of parameters that you can use ...