ACM Flashcards
This deck aims to help retain concepts related to the ACM service.
Which AWS service simplifies the management and deployment of public and private SSL/TLS certificates for AWS services and integrated resources?
AWS Certificate Manager (ACM)
Is AWS Certificate Manager (ACM) a global service?
No, ACM is a regional service
Can ACM certificates be used outside the region where they are created?
No, ACM certificates are confined to the region in which they are generated or imported
Where should the ACM certificate be created for an Application Load Balancer (ALB) created in the us-east-2 region?
In the same region (us-east-2), ACM certificates must match the region of the associated AWS service
Where should the ACM certificate be created for Amazon CloudFront service?
In the us-east-1 region, CloudFront requires certificates to be created in this region since it is a global service
What is the primary function of the AWS Certificate Manager (ACM)?
To run a public or private Certificate Authority (CA) service
Do applications trust private Certificate Authorities (CAs) by default?
No, applications must be explicitly configured to trust a private CA
Do browsers trust public Certificate Authorities (CAs) by default?
Yes, browsers trust a predefined list of root CAs by default
These root CAs may delegate trust to intermediate CAs, creating a chain of trust that browsers use to verify the authenticity of SSL/TLS certificates presented by websites
Can external certificates be imported into AWS Certificate Manager (ACM)?
Yes, ACM supports both importing external certificates and generating certificates directly within the service
Can imported certificates in AWS ACM be renewed automatically?
No
- Imported certificates must be manually renewed and re-imported
- Certificates generated by ACM are eligible for automatic renewal
What AWS services can use ACM certificates?
- Elastic Load Balancing (ELB)
- CloudFront
- API Gateway
- Elastic Beanstalk, and more
Can ACM certificates be used directly with an EC2 instance?
No, ACM certificates are supported only with ACM-integrated services like CloudFront and ELB
