Package updates are generally pushed in to the repositories and can be obtained to any variations of the Amazon Linux AMI in which yum is configured to point to "latest". Let’s Encrypt certificates are fetched through customer software operating on your own server. The official client is termed Certbot. https://mypresspage.com/story2468497/dovecot-install-no-further-a-mystery