- Home
- Certificate Management Software
- AWS Certificate Manager
AWS Certificate Manager
What it is
AWS Certificate Manager (ACM) provisions, manages, and deploys public and private SSL/TLS certificates for AWS, hybrid, and multicloud workloads. Certificates can cover one domain, multiple named domains, wildcard domains, or combinations. Teams can manage them through the AWS Management Console, AWS CLI, or ACM APIs, and audit use through AWS CloudTrail logs. ACM manages renewal for Amazon-issued certificates: DNS-validated certificates renew automatically, while email notices are sent as expiration approaches otherwise. Public-certificate integrations include Elastic Load Balancing, Amazon CloudFront, Amazon API Gateway, AWS Elastic Beanstalk, and AWS CloudFormation. AWS Key Management Service helps protect private keys stored by ACM. Customers can import third-party CA certificates and deploy them with Elastic Load Balancers, CloudFront, and API Gateway; importing certificates costs nothing. The default quota is 10 domain names per certificate, and customers can request up to 100. The free plan provides non-exportable public certificates for integrated AWS services at no cost.
For and against
For
- Certificates can be managed through console, CLI, or APIs.
- DNS-validated Amazon-issued certificates renew automatically.
- Certificate use can be audited through CloudTrail logs.
- Importing third-party CA certificates costs nothing.
- Customers can request a quota of up to 100 domain names.
Against
- Free integrated-service public certificates are non-exportable.
- The default quota is 10 domain names per certificate.
- Automatic renewal requires DNS validation; otherwise notices are sent.
The verdict
ACM centralizes certificate management and supports automatic renewal for DNS-validated Amazon-issued certificates. Its free integrated-service public certificates are non-exportable, and the default domain-name quota is 10 per certificate.
Who it suits
ACM suits teams managing certificates for websites, applications, and communication between connected resources such as servers, mobile and IoT devices, and applications. It is relevant to organizations using AWS, hybrid, or multicloud workloads.
Plans and prices
Public certificate for integrated AWS services
Non-exportable · for integrated AWS services
Read 4 Oct 2026 · aws.amazon.com
ACME public certificates
First 1k FQDNs: $1.00/domain · next 3k FQDNs: $0.50/domain · 4k+ FQDNs: $0.25/domain · first 500 wildcard domains: $5.00/domain
Read 4 Oct 2026 · aws.amazon.com
Exportable public certificates
First 10K export-certificate API calls: $0 per account per month · next 10,000 API calls: $0.50 per 10k per account per month
Read 4 Oct 2026 · aws.amazon.com
On the record
- Automatic renewal
- ACM provides managed renewal for Amazon-issued SSL/TLS certificates, renewing automatically when DNS validation is used or sending email notices as expiration approaches.docs.aws.amazon.com · read 4 Oct 2026
- AWS launch
- Amazon Web Services says it launched in 2006.aws.amazon.com · read 4 Oct 2026
- Certificate management
- Certificates can be centrally managed from the AWS Management Console, AWS CLI, or ACM APIs, and their use can be audited through AWS CloudTrail logs.aws.amazon.com · read 4 Oct 2026
- Certificate types
- ACM supports certificates for singular domain names, multiple specific domain names, wildcard domains, or combinations of these.docs.aws.amazon.com · read 4 Oct 2026
- Integrations
- ACM integrates with Elastic Load Balancing, Amazon CloudFront, Amazon API Gateway, AWS Elastic Beanstalk, and AWS CloudFormation for public certificates.aws.amazon.com · read 4 Oct 2026
- Key security
- ACM uses AWS Key Management Service to help protect certificate private keys that it stores.docs.aws.amazon.com · read 4 Oct 2026
- Notable quota
- The default quota is 10 domain names per ACM certificate, and customers can request up to 100 domain names.docs.aws.amazon.com · read 4 Oct 2026
- Purpose
- AWS Certificate Manager provisions, manages, and deploys public and private SSL/TLS certificates for AWS, hybrid, and multicloud workloads.aws.amazon.com · read 4 Oct 2026
- Third-party certificates
- ACM allows customers to import third-party CA certificates and deploy them with Elastic Load Balancers, CloudFront, and APIs on API Gateway; importing certificates does not cost anything.aws.amazon.com · read 4 Oct 2026
- Who it is for
- AWS says ACM can protect websites and applications and secure communication between connected resources such as servers, mobile and IoT devices, and applications.aws.amazon.com · read 4 Oct 2026
