Post-quantum TLS now supported in AWS KMS (except I'm not sure if they support DNSSEC and IPv6 in Route53 yet ;) https://aws.amazon.com/blogs/security/post-quantum-tls-now-supported-in-aws-kms/