On a side note, Route 53 doesn't support DNSSEC unfortunately. Might be part of the reason that Amazon.com uses Dyn and UltraDNS instead?