A citizen portal must enforce TLS 1.2 or higher for all public HTTPS entry points. Which design best provides encryption in transit with managed certificates on AWS?
Select an answer to reveal the explanation.
Short Explanation
Think of ACM on ALB, CloudFront, or API Gateway as the city’s official TLS lockset—citizens get HTTPS with modern TLS, and you are not hand-gluing expired PEMs into git. HTTP-only and FTP are non-starters for a portal.
Full Explanation
Encryption in transit for public portals commonly uses ACM certificates on ALB, CloudFront, or API Gateway with TLS policies that require contemporary protocol versions such as TLS 1.2+. That centralizes certificate issuance and renewal. Cleartext HTTP, expired embedded certs, and FTP fail confidentiality and managed-certificate goals.