GCP is the only service that I know of that supports this. That being said, AWS does allow you to put your name servers somewhere else, say GCP, and then do DN

GCP is the only service that I know of that supports this. That being said, AWS does allow you to put your name servers somewhere else, say GCP, and then do DNSSEC there. Really the main security concern with AWS is no browser in the terminal. This feature, which both GCP and Azure have, really eliminates the ssh-key litter.