Have you seen this more recent workaround? Renew Error:No module named cryptography.hazmat.bindings.openssl.binding
Since Certbot appears to persistently have problems with Amazon Linux, consider also a client with less dependencies in the long term: https://letsencrypt.org/docs/client-options/