View a markdown version of this page

Automation outside integrated services - Amazon Certificate Manager
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Automation outside integrated services

You can export an ACM issued certificate for use on any workload. Once exported, you get access to the certificate's private key that you can employ to securely terminate TLS traffic.

Tip

If you want to automate certificate issuance and renewal directly on your customer-managed infrastructure, we recommend ACME certificate automation for use with industry-standard, open source ACME clients (such as Certbot or cert-manager). See ACME certificate automation. Alternatively, if you cannot use ACME, you can automate exportable certificates issued from ACM through Amazon Workload Credentials Provider.