I like that this is integrated with AWS services, but it's not perfect - there are some limitations around S3 integration (not easy to upload certs).
If you're looking at an EC2-to-(or)-AWS solution then consider other solutions as well; we were considering moving away from Cloudflare entirely because of issues related specifically their CDN being down/slow during certificate rotation timeframes etc., which was impacting our site speed in general too! We use certificates heavily within Elastic Beanstalk environments so managing them securely has been key here.