Track and Update SSL/TLS Certificates: AWS Cloud Practitioner Exam
Question
A web administrator maintains several public and private web-based resources for an organisation.
Which service can they use to keep track of the expiry dates of SSL/TLS certificates as well as updating and renewal?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer - D.
The AWS Certificate Manager allows the web administrator to maintain one or several SSL/TLS certificates, both private and public certificates including their update and renewal so that the administrator does not worry about the imminent expiry of certificates.
https://aws.amazon.com/certificate-manager/Option A is INCORRECT.
The AWS Lifecycle Manager creates life cycle policies for specified resources to automate operations.
https://docs.aws.amazon.com/dlm/?id=docs_gatewayOption B is INCORRECT.
AWS License Manager serves the purpose of differentiating, maintaining third-party software provisioning vendor licenses.
It also decreases the risk of license expirations and the penalties.
https://docs.aws.amazon.com/license-manager/?id=docs_gatewayOption C is INCORRECT.
AWS Firewall Manager aids in the administration of Web Application Firewall (WAF), by presenting a centralised point of setting firewall rules across different web resources.
https://docs.aws.amazon.com/firewall-manager/?id=docs_gatewayThe correct answer is D. AWS Certificate Manager.
AWS Certificate Manager (ACM) is a service that allows you to provision, manage, and deploy SSL/TLS certificates for use with AWS services and your internal resources. It makes it easy to deploy SSL/TLS certificates on AWS resources like Elastic Load Balancers, CloudFront distributions, and API Gateways.
One of the features of ACM is the ability to track the expiration dates of SSL/TLS certificates and automatically renew them. ACM manages the entire certificate renewal process for you, so you don't have to worry about manually updating certificates or dealing with expired certificates.
In addition to automating certificate renewal, ACM also provides centralized management of your certificates, so you can easily keep track of all the certificates used by your organization. This makes it easier to maintain security and compliance standards.
To use ACM, you need to create a certificate request, which can be done from within the ACM console or via the AWS CLI. Once you've created a certificate request, you can use it to provision SSL/TLS certificates for use with your AWS resources.
In summary, AWS Certificate Manager is the service that a web administrator can use to keep track of the expiry dates of SSL/TLS certificates as well as updating and renewal. It provides centralized management of certificates and automates the renewal process, making it easy to maintain security and compliance standards.
