AWS Certified Developer – Associate (DVA-C02) — Question 269

A developer needs to deploy an application in three AWS Regions by using AWS CloudFormation. Each Region will use an AWS Elastic Beanstalk environment with an Application Load Balancer (ALB). The developer wants to use AWS Certificate Manager (ACM) to deploy SSL certificates to each ALB.

Which solution will meet these requirements?

Answer options

• A. Create a certificate in ACM in any one of the Regions. Import the certificate into the ALB that is in each Region.
• B. Create a global certificate in ACM. Update the CloudFormation template to deploy the global certificate to each ALB.
• C. Create a certificate in ACM in each Region. Import the certificate into the ALB for each Region.
• D. Create a certificate in ACM in the us-east-1 Region. Update the CloudFormation template to deploy the certificate to each ALB.

Correct answer: C

Explanation

AWS Certificate Manager (ACM) certificates are regional resources and must reside in the same AWS Region as the Application Load Balancer (ALB) they are securing. Therefore, the developer must create a distinct ACM certificate in each of the three target Regions to associate them with the respective regional ALBs. Certificates created in a single region or us-east-1 cannot be bound to ALBs in other regions.