AWS Certificate Manager (ACM)

• ACM handles the complexity of creating, storing, and renewing public and private SSL/TLS X.509 certificates and keys that protect your AWS websites and applications.

• You can provide certificates for your integrated AWS services either by issuing them directly with ACM or by importing third-party certificates into the ACM management system.

• ACM certificates can secure singular domain names, multiple specific domain names, wildcard domains, or combinations of these.

• ACM wildcard certificates can protect an unlimited number of subdomains.

• You can also export ACM certificates signed by ACM Private CA for use anywhere in your internal PKI.

• You can optionally configure a Certification Authority Authorization (CAA) DNS record to specify that ACM is allowed to issue a certificate for your domain or subdomain. After it validates your domain, ACM checks for the presence of CAA records to make sure it can issue a certificate for you. You can choose to not configure a CAA record for your domain or leave the record blank if you do not want to enable CAA checking.