Instructor: Now let's talk about
AWS certificate manager or ACM,
which is a service to easily provision, manage
and deploy SSL or TLS certificates.
What do you use the certificates for?
Well it's to provide in-fight encryptions
for your websites by providing an HTTPS endpoints.
So let's take an example.
We have our application load balancer
and it is connected in the backend through HTTP
to an auto scaling group with our EC2 instances.
But we want our end users to have HTTPS exposed
on our application of answer.
So to do so we're going to use ACM.
And ACM once it's connected to our domain
is going to be allowing us to provision
and maintain these TLS certificates.
They will be loaded onto our application load balancer
and then automatically the load balancer will be able to
offer HTTPS as an end point for our clients,
which allows us to get in-flight encryption
over the public web.
So ACM supports both public and private TLS certificates
and it is free of charge for public TLS certificates.
There's also a very nice feature
which is automatic TLS certificate renewal
which is very helpful, I use it all the time.
And it has integration, that means
that it loads the TLS certificates on different services.
It could be your elastic load balancer,
your CloudFront distributions
or your API is on API gateway, for example, okay?
So anytime you see what service can help us do
in-flight encryption and generates these certificates
then think ACM, that's it.
I will see you in the next lecture.