A public permits website terminates TLS on Application Load Balancers across multiple AWS accounts and needs centrally requestable certificates with automatic renewal. Which certificate approach best fits?
Select an answer to reveal the explanation.
Short Explanation
ACM is the city clerk for TLS: request, validate, auto-renew, attach to ALBs. Spreadsheet reminders and USB-passed PEMs are how public portals get expired-certificate outages. Keep HTTPS on and let ACM handle renewals.
Full Explanation
AWS Certificate Manager issues and automatically renews public TLS certificates used with integrated services such as Application Load Balancers and CloudFront (with Regional/account placement constraints respected). Multi-account ALB designs typically provision ACM certificates in the accounts and Regions where listeners terminate TLS. Manual file-based certificate distribution, disabling HTTPS, or exposing private keys in public storage are insecure and operationally fragile.