Internal Application Load Balancers for a municipal intranet only need trust from city-managed devices, not from public browsers on the internet. Which certificate approach fits?
Select an answer to reveal the explanation.
Short Explanation
Intranet badges are not passport stamps. Private CA certs fit internal ALBs that only city gear trusts; public ACM certs are for the internet edge. Turning TLS off inside the VPC still leaves room for snooping and broken policy.
Full Explanation
ACM Private CA issues certificates for private trust domains such as internal ALBs that do not need public CA trust. Public ACM certificates remain appropriate for internet-facing endpoints. Ignoring trust errors, forcing permanent exception lists, or disabling HTTPS on internal load balancers weakens in-transit protection.