Prevent an HTTPS certificate from expiring.
Associate the certificate with an ALB and reduce manual renewal work.
Which service is most appropriate?
Use AWS Certificate Manager to issue and manage a certificate associated with the ALB.
Detailed explanation
This requires manual key handling and renewal and increases the risk of exposing the private key.
This requires manual key handling and renewal and increases the risk of exposing the private key.
S3 lifecycle rules do not manage ACM certificates or their private keys.
S3 lifecycle rules do not manage ACM certificates or their private keys.
An ACM certificate can be associated with a supported service and automatically renewed when its requirements are met.
An ACM certificate can be associated with a supported service and automatically renewed when its requirements are met.
DNS TTL controls DNS caching and does not renew TLS certificates.
DNS TTL controls DNS caching and does not renew TLS certificates.
Check official documentation
Compare the following points with the official documentation.
AWS Certificate Manager automatic renewalの公式説明を確認する。
What to confirm
ACM証明書と自己管理証明書の運用差を説明できる。
Key points
- AWS Certificate Manager
- Automatic renewal
- ALB HTTPS
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current AWS service behavior in the official documentation.
Foundation review
Certificate lifecycle
Issuance, association, renewal, and replacement are separate from DNS caching.
Private-key handling
Managed certificate services reduce manual exposure of certificate material.