Deal updates are often pushed into your repositories and can be obtained to any variations on the Amazon Linux AMI where yum is configured to stage to "hottest". Google Trust Services would not support punycode domains as described in the certificate authorities constraints. Bottlerocket can make it easy to https://www.hostscheap.com/domain-privacy-service