Encrypt traffic between users and an HTTPS load balancer while reducing certificate-management work.
Choose the appropriate AWS services.
Which design is most appropriate?
AWS Certificate Manager manages the certificate and a load balancer can terminate HTTPS/TLS for traffic in transit.
Detailed explanation
A security group controls network traffic and does not issue certificates.
A security group controls network traffic and does not issue certificates.
ACM supports certificate management and the load balancer can terminate HTTPS/TLS.
ACM supports certificate management and the load balancer can terminate HTTPS/TLS.
Data in transit also needs protection from interception and tampering.
Data in transit also needs protection from interception and tampering.
Lifecycle manages objects, not certificates.
Lifecycle manages objects, not certificates.
Check official documentation
Compare the following points with the official documentation.
AWS Certificate ManagerとElastic Load BalancingのHTTPS/TLS公式説明を確認する。
What to confirm
転送中暗号化をACMとTLS終端へ対応付けられる。
Key points
- AWS Certificate Manager
- TLS termination
- HTTPS
- Encryption in transit
Notes
- Environment: AWS公式ACM・ELBドキュメントの確認
- Confirm current AWS service behavior and security guidance in the official documentation.
Foundation review
Certificate lifecycle
ACM reduces certificate issuance and renewal work, while the load balancer provides the TLS endpoint.
Data state
Encryption in transit protects network traffic; encryption at rest protects stored data.