That's seem standard AWS practice. Implement a new feature so you can check the box, but in practice it's a huge pain to actually use.