Support for non-IAM certificates..

[rlyle]

Any chance, you could support non-IAM certificates... our certificate is managed by AWS certificate manager, so I can't get it deployed to IAM.

[rlyle]

so went ahead and created a PR.