AWS Certificate Manager (ACM)
Simplifying the provisioning, management, and deployment of public and private SSL/TLS certificates.
The Prerequisites
What you need before requesting a managed certificate
Domain Name
A fully qualified domain name (FQDN) like example.com or a wildcard like *.example.com.
DNS Access
Permission to add CNAME records to your DNS provider (e.g., Route 53) for identity validation.
Email Control
Access to admin/webmaster emails if using Email Validation instead of DNS validation.
IAM Roles
Proper AWS Identity and Access Management permissions to request and describe certificates.
The Lifecycle Process
From initial request to automated renewal
Request
Choose Public or Private CA. Specify domain names and validation method.
Validate
Prove ownership via DNS (recommended) or Email. ACM checks for the record.
Issue
AWS issues the certificate. Status changes from ‘Pending’ to ‘Issued’.
Deploy
Associate with CloudFront, ALB, or API Gateway. Traffic is now encrypted.
Renew
ACM automatically renews certificates before they expire (if DNS record stays).