AWS Certificate Manager (ACM)
AWS ACM Integration
Section titled “AWS ACM Integration”Short Summary: Import privately issued certificates into AWS ACM so they can be attached to ELBs/ALBs.
Use Cases
Section titled “Use Cases”- Private PKI in Cloud: Use certificates from your internal MSCA on public-facing ALBs.
- Centralized Renewal: SSL-CLM renews the cert and automatically re-imports it to ACM.
Configuration
Section titled “Configuration”- Navigate: Admin > Cert Stores > Add New.
- Select Provider:
AWS ACM. - Region:
us-east-1. - Credentials: IAM User with
acm:ImportCertificatepermissions.
How it Works
Section titled “How it Works”- SSL-CLM issues a certificate (e.g., from MSCA).
- SSL-CLM calls
acm:ImportCertificatewith the Body, Private Key, and Chain. - ACM returns an ARN (
arn:aws:acm:...). - You attach this ARN to your Load Balancer.