I had realised this mistake and re-published the article within an hour of posting it - the installation of dns-lexicon is now performed within the venv at hook runtime, so the venv wipeout should not be an issue (tested).
Thank you for posting the links. Many issues to think about. Sad to see that the AWS SDK is a monster in every language 
.