Getting Started with AWS Certificate Manager

Use the wizard to request an SSL/TLS certificate by choosing Request a public certificate and entering the name of your site. You can also request a certificate using the AWS CLI or API.

After successful validation of your ownership or control of the domain names in your certificate request, the SSL/TLS certificate is issued. You can deploy this certificate for use with Elastic Load Balancers, Amazon CloudFront distributions, or APIs on Amazon API Gateway. You simply select the SSL/TLS certificate you want from a drop-down list in the AWS Management Console. Alternatively, you can execute a CLI command or call an AWS API to associate the certificate with an AWS resource. AWS Certificate Manager then deploys the certificate to the resource you selected.

For more information about creating and using certificates provided by AWS Certificate Manager, visit the AWS Certificate Manager FAQs page or see Getting Started in the AWS Certificate Manager User Guide.

Navigate to the Private CAs portion of the ACM console, and choose Get Started to create a Private CA. To activate your ACM Private CA, you can share your private CA using AWS Resource Access Manager (RAM) to allow certificate issuance by other accounts within your organization. You can create a Root CA or create a subordinate CA which chains up to your corporate CA hierarchy. 

After creating and activating your Private CA, you can use AWS Certificate Manager (ACM) for certificate management. To get started with ACM, you can use the AWS Certificate Manager wizard to choose Request a private certificate, then select your Private CA from the dropdown list, and enter the name of your site. AWS Certificate Manager takes care of generating the key pair and issuing the certificate from your Private CA. ACM can deploy the private certificate to the AWS resources you select, or you can export the certificate and use it on EC2 instances, containers, or with on-premises servers.

For more information about creating and using ACM Private CA and private certificates, visit the AWS Certificate Manager FAQs page or see Getting Started in the AWS Certificate Manager User Guide.