A new lead in Salesforce is pushed to AWS Certificate Manager — into a targeting or exclusion audience.