Home › AWS Developer Associate › cloudcomputing › awsdevsecurity › Which AWS service issues, manages, and auto-rene…
Which AWS service issues, manages, and auto-renews public TLS certificates for use with ALB, CloudFront, and API Gateway at no additional cost?
AAWS Certificate Manager (ACM)
BAWS Key Management Service (KMS)
CAWS Secrets Manager
DAmazon Route 53
Answer & Solution
Correct answer: A. AWS Certificate Manager (ACM)
ACM issues domain-validated public TLS certs (free) and private CA certs (paid) and auto-renews them when attached to AWS endpoints. KMS handles encryption keys; Secrets Manager stores secrets; Route 53 is DNS.
Related questions
An S3 bucket policy grants `s3:GetObject` only when the request includes a specific VPC enWhich approach correctly handles environment-specific configuration (DB endpoints, featureAn application must encrypt user-uploaded files in S3 with a key the customer controls (CMWhich IAM feature lets a developer's IAM role temporarily "impersonate" a service-account-A Lambda function reads database credentials at cold start from AWS Secrets Manager and caAn API Gateway REST API needs to require a valid Amazon Cognito ID token on every call. WhWhich IAM construct is best for granting a CodeBuild project the right to read from one spA static website served from S3 must allow time-limited downloads to authenticated users w