Amazon doesn't like that Alias either. A friend on mine, Scott, just figured out though that you can point your Alias record at any ELB even outside your account:

https://twitter.com/scottvdp/status/341604885600534530

So I can make an Alias record to the ELB that heroku is pointing at with their SSL CNAMES.