DVA-C02 Question 174
Single answerA development team is building a secure internal web application that requires SSL/TLS encryption. The team wants to issue private certificates for the application and ensure the certificates can be managed centrally within AWS. They also want to automate the certificate renewal process to minimize operational overhead. Which AWS service or feature should the team use to meet these requirements?
- A
AWS Certificate Manager (ACM) with an imported certificate
- B
AWS Private Certificate Authority (AWS Private CA) integrated with AWS Certificate Manager (ACM)
- C
AWS Key Management Service (KMS) for certificate issuance and management
- D
Amazon S3 for storing and managing SSL/TLS certificates
Show answer and explanation
Correct answer: B
Explanation
AWS Private Certificate Authority (AWS Private CA) integrated with AWS Certificate Manager (ACM) is the correct solution for issuing and managing private SSL/TLS certificates in AWS. By using AWS Private CA, the development team can automate the issuance and renewal of private certificates while managing them centrally through ACM, reducing operational overhead.
- A. Incorrect.
AWS Certificate Manager (ACM) with an imported certificate allows you to manage certificates but does not automate the issuance or renewal of private certificates. Imported certificates must be manually renewed.
- B. Correct.
AWS Private Certificate Authority (AWS Private CA) integrated with AWS Certificate Manager (ACM) is specifically designed for issuing and managing private certificates. It allows for centralized management, automation of certificate renewal, and seamless integration with AWS services.
- C. Incorrect.
AWS Key Management Service (KMS) is used for managing encryption keys, not SSL/TLS certificates. It cannot be used for private certificate issuance or management.
- D. Incorrect.
Amazon S3 is a storage service and does not provide features for SSL/TLS certificate management.