SSL certs are managed by AWS certificate manager and all VMs are deployed via elastic beanstalk or exist as Lambda functions. No SSH access is enabled across any of our infrastructure.
That said for these services it works very well, except there are some issues with it lagging on sending confirmation emails that just make you retry.