https://cramsession.net/index.php?action=history&feed=atom&title=Study_Guides%2FAWS_Cybersecurity_Notes%2FACM 2026-07-20T02:25:25Z Revision history for this page on the wiki MediaWiki 1.41.1 https://cramsession.net/index.php?title=Study_Guides/AWS_Cybersecurity_Notes/ACM&diff=1786&oldid=prev 2026-06-27T01:55:20Z

<p>Created page with &quot;= AWS Certitifate manager = This is a internal AWS managed service for SSL and TLS certificates. One of it&#039;s major drawbacks is limited configuation options. ::If a customer needs a specicifc configuration then it may not work. It can create private certificate authaotorites. ACM also easily intergrates with AWS ELB. It&#039;s manin purpose is to simplify certificate use. ::* Easy to add certs. ::* You can use an email address for vertification when adding a cert....&quot;</p> <p><b>New page</b></p><div>= AWS Certitifate manager =<br /> <br /> This is a internal AWS managed service for SSL and TLS certificates.<br /> <br /> One of it&#039;s major drawbacks is limited configuation options.<br /> <br /> ::If a customer needs a specicifc configuration then it may not work.<br /> <br /> <br /> It can create private certificate authaotorites.<br /> <br /> ACM also easily intergrates with AWS ELB.<br /> <br /> <br /> It&#039;s manin purpose is to simplify certificate use.<br /> <br /> ::* Easy to add certs.<br /> <br /> ::* You can use an email address for vertification when adding a cert.<br /> <br /> <br /> == Types of Certificate ==<br /> <br /> ::Public<br /> <br /> :::These use a public CA and are trusted by web browsers.<br /> <br /> <br /> ::Private<br /> <br /> :::These are only trusted by devices that are configured to use the privace CA they reference.<br /> <br /> <br /> ::Wildcard certificates.<br /> <br /> :::These simplifiy and save money by allowing *.mycorp.com<br /> <br /> <br /> Some you may not know of:<br /> <br /> ::* Domain validation certficiates <br /> <br /> ::: Issued based on domain ownership.<br /> <br /> <br /> ::* Organization Validation certificates <br /> <br /> ::: A secure certificate that requires the CA to validate the legal name and address.<br /> <br /> <br /> ::* Extdend Validation cdrtificates<br /> <br /> ::: Thse have a rigerious vetting to process to validate identity.<br /> <br /> <br /> <br /> == Securing an S3 website ==<br /> <br /> :: Remmeber S3 can only host HTML, JS and CSS - Static only!<br /> <br /> <br /> When you link ACM with an S3 site HTTPS is enabled.<br /> <br /> The SSL offloading is done via cloudfront - therefore cloud front is a requirement when enabling HTTPS on S3.<br /> <br /> <br /> == With ELB ==<br /> <br /> When using with ELB consinder that ELB offloads the SSL.<br /> <br /> :* ELB Decripts the message<br /> <br /> :* ELB forawrds to the destination<br /> <br /> <br /> == Automation ==<br /> <br /> ACM can:<br /> <br /> :* Automatically renew certs<br /> <br /> :* Send email reminders for manual renewal.<br /> <br /> <br /> When you cannot renew:<br /> <br /> :* Private certs - issued with the IssueCertfifcate API<br /> <br /> :* Imported from external sources.<br /> <br /> :* Anything already expired.<br /> <br /> <br /> What it works with:<br /> <br /> :* AWS services<br /> <br /> :: Including EC2<br /> <br /> <br /> == Cases for a Private CA ==<br /> <br /> :* Better control<br /> <br /> :* Custom policies<br /> <br /> :* Better internal resource protection &amp; management<br /> <br /> :* Improved incident response<br /> <br /> :* Improved auditing<br /> <br /> :* Central account management<br /> <br /> :* Scalable</div>

Mflavell