From an Amazon job posting. Seems to imply at least some of the Corretto maintenance would be in-house, at Amazon:
"sharing your findings with the rest of the engineering community, hardening your patches in Amazon's production systems, releasing them as part of Corretto, and contributing improvements back to OpenJDK."
