Firewall Policy and Cloud Services

One source Ip should be able to connect with SSH to git-codecommit.eu-central-1.amazonaws.com

Now this target isn't only one IP and it's possible that the IP changes often over time.

How would you solve this in a Fortigate?