AWS Certified Cloud Practitioner — Question 448

Which AWS service keeps track of SSL/TLS certificates, creates new certificates, and processes renewals?

Answer options

• A. AWS Identity and Access Management (IAM)
• B. AWS Certificate Manager (ACM)
• C. AWS Config
• D. AWS Trusted Advisor

Correct answer: B

Explanation

AWS Certificate Manager (ACM) is the designated service for handling the lifecycle of SSL/TLS certificates, including creation, deployment, and automated renewal. AWS Identity and Access Management (IAM) is used for access control, AWS Config monitors resource configurations, and AWS Trusted Advisor provides recommendations for cost, security, and performance. Therefore, ACM is the correct service for certificate management.