ACM - AWS Certificate Manager Flashcards
True or False: ACM lets you run a public or private CA.
True.
True or False: a public ACM uses a normal chain of trust, so it doesn’t require you to configure trust on your clients.
True.
True or False: a private ACM certificate requires you to configure trust on your clients.
True.
Can ACM generate certificates?
Yes
What two verification methods can be used when ACM generates a certificate?
DNS or email verification.
Why is DNS a better verification method when generating a certificate in ACM? (two reasons)
- Simplicity: If your domain is hosted with R53, ACM can auto-create the DNS verification records.
- Auto-renewal: ACM can auto-renew certs when DNS verification records are used.
Can ACM import certificates from other sources?
Yes.
ACM can only auto-renew one source of certificates - what is it?
Certificates generated by ACM.
Whose responsibility is it to renew imported certificates?
Your responsibility (ie. not AWS/ACM)
In general terms, what services can ACM certs be deployed to?
Supported services only.
Can ACM certs be deployed to any AWS service?
No. Only supported services.
Can ACM certs be used with EC2?
No.
Which screen is the EC2 configuration for ACM located on?
Trick question. ACM does not support deployment to EC2.
What are two common services that ACM is used with?
- CloudFront.
- Elastic Load Balancer.
Is ACM a global or region-based service?
It’s a regional service.
When using a service such as ELB with ACM, what is the rule regarding the region that each service is in?
They must be in the same region.
How is cross-region ACM use configured?
Trick question - you can’t. ACM and the service must be in the same region.
Which ACM region does a global service like CloudFront use? Why is this?
The us-east-1 region.
Because all CloudFront Distributions are located in us-east-1.
Does S3 use ACM?
No.
How does a certificate get deployed to CloudFront Edge Locations? (two steps)
- ACM deploys the certificate to the distribution.
- The distribution then sends the cert to the Edge Locations.