Answer
Rather than reconfiguring MWS itself to bind directly to port 443, put a Load Balancer in front of it configured as a TCP-type load balancer with its listener set to port 443, forwarding traffic through to MWS on its normal internal port. This is the recommended architecture for suppressing the port number from the public-facing URL while leaving MWS itself running on its standard port behind the load balancer.