A permit system needs TLS certificates for custom domains on an Application Load Balancer, CloudFront, and API Gateway. Which service should provision and renew those certificates?
Select an answer to reveal the explanation.
Short Explanation
ACM is the city’s certificate desk for HTTPS on ALB, CloudFront, and API Gateway—it issues and renews so you are not chasing paper expirations. Macie, GuardDuty, and Snowball are great at other jobs, but they are not your TLS shop.
Full Explanation
AWS Certificate Manager provisions, deploys, and can automatically renew TLS certificates used with integrated services such as Elastic Load Balancing, Amazon CloudFront, and API Gateway custom domains. That removes much of the manual certificate lifecycle burden for public HTTPS endpoints. Macie, GuardDuty, and Snowball address data discovery, threat detection, and data transfer—not certificate issuance for those front ends.