Went through that recently with @JonR
All seems easy enough. In your case though REMEMBER to pause Cloudflare as Certbot won’t have access to create the certificates. Also may take a little longer than normal to generate. JonR is also on AWS.