Public HTTPS endpoints for a new municipal portal must use centrally issued certificates with automatic renewal. Setting aside client certificate-pinning debates, what should architects mandate?
Select an answer to reveal the explanation.
Short Explanation
ACM hands out the city's HTTPS badges and renews them before they expire—no personal credit cards, no decade-old self-signed leftovers. Turning TLS off to dodge renewal is not a certificate strategy.
Full Explanation
AWS Certificate Manager provides publicly trusted certificates with automated renewal for integrated AWS endpoints, which is the preferred certificate control for mandated public HTTPS. Long-lived self-signed certs, personal procurement of keys via email, and disabling TLS do not meet certificate management security controls.