Depends if s2n is vulnerable to the same bug. Of course AWS doesn't protect you against application bugs so if your application has an SSRF vulnerability (pres

Depends if s2n is vulnerable to the same bug. Of course AWS doesn't protect you against application bugs so if your application has an SSRF vulnerability (presumably otherwise unexploitable) an attacker might be able to DoS you. They don't mention S/MIME or things like signed binaries or SAML assertions but those seem plausibly vulnerable as well.