You can still automate Let's Encrypt even if your system requires a DNS challenge. Using these PowerShell scripts and Amazon Web Services' DNS service Route 53 will do the trick.

If you need to tag several instances (think bulk!), the filtering capabilities of PowerShell can make the process a lot easier. Although you can tag an Amazon Elastic Compute Cloud (EC2) instance ...

Brien Posey explains how to address problems caused when your EC2 instances happen to be in a different region from the one that AWS Tools for PowerShell is configured to use.