<h1>AWS Certificate Manager Unveils Exportable Public SSL/TLS Certificates for Flexible Use</h1>
<p>AWS Certificate Manager (ACM) has introduced a significant update that broadens the scope of its certificate utility by offering exportable public SSL/TLS certificates. This new feature allows users to deploy these certificates across a variety of workloads, including EC2 instances, containers, and on-premises hosts, extending beyond its previous limitation to integrated AWS services such as CloudFront and Elastic Load Balancing (ELB).</p>
<h2>Key Features and Benefits</h2>
<ul>
<li>
<p><strong>Exportable Certificates:</strong> Users now have the ability to access the private keys associated with the public certificates, enabling their use outside of AWS-controlled environments.</p>
</li>
<li>
<p><strong>Cost and Validity:</strong> Certificates are affordably priced at $15 per fully qualified domain name (FQDN) and $149 per wildcard domain. These certificates remain valid for 395 days.</p>
</li>
<li>
<p><strong>Quick Issuance:</strong> Post domain validation, certificates can be issued within seconds, making it a swift option for businesses needing rapid deployment.</p>
</li>
<li>
<p><strong>AWS Integration and Security:</strong> The new feature includes IAM policy controls for enhanced security. Organizations can disable the export capability to maintain a more stringent security posture if desired.</p>
</li>
</ul>
<h2>Considerations</h2>
<p>While this feature fulfills a broad market demand with its flexibility and competitive pricing, it currently lacks ACME protocol support for automated renewals. As such, users need to manually manage renewals, necessitating careful monitoring and setup of calendar reminders to avoid disruptions due to certificate expiration.</p>
<p>AWS has provided solutions for manual renewals by configuring EventBridge for automated alerts, which assists in managing the renewal process effectively.</p>
<h2>Availability</h2>
<p>The exportable certificate feature is available across all ACM-supported regions, issued by Amazon Trust Services. With these enhancements, AWS continues to offer robust, flexible, and cost-effective solutions that cater to diverse business needs.</p>
<p>In summary, this capability aligns with AWS’s vision of offering versatile and scalable cloud solutions, invigorating users to leverage its certificates both within and beyond the AWS ecosystem.</p>


Collections

AWS Certificate Manager now offers exportable public SSL/TLS certificates that can be deployed beyond AWS services to EC2 instances, containers, and on-premises hosts. Priced at $15 per FQDN and $149 per wildcard domain with 395-day validity, certificates are issued within seconds after domain validation. The feature includes IAM policy controls for security but lacks ACME protocol support, requiring manual renewal management with EventBridge alerts for monitoring.