Skip to content
SPECIFICTION
Get listed

AWS Certificate Manager

aws.amazon.com

Free plan WebAPI
Visit aws.amazon.com
Spec score 7.7 #16 of 31 in Certificate Management Software

What it is

AWS Certificate Manager (ACM) provisions, manages and deploys public and private SSL/TLS certificates for AWS, hybrid and multicloud workloads. Certificates may cover one domain, multiple named domains, wildcard domains or combinations. Management is available through the AWS Management Console, AWS CLI and ACM APIs, with usage auditable in AWS CloudTrail logs. Amazon-issued certificates can renew automatically when DNS validation is used; otherwise ACM sends notices as expiration approaches. Public-certificate integrations include Elastic Load Balancing, Amazon CloudFront, Amazon API Gateway, AWS Elastic Beanstalk and AWS CloudFormation. AWS Key Management Service helps protect stored private keys. Customers can import third-party CA certificates and deploy them with Elastic Load Balancers, CloudFront and API Gateway; importing costs nothing. The default quota is 10 domain names per certificate, with requests up to 100. The integrated-services public-certificate plan is free and non-exportable. ACM is available on web and API platforms.

Spec sheet

Purpose
AWS Certificate Manager provisions, manages, and deploys public and private SSL/TLS certificates for AWS, hybrid, and multicloud workloads.Read 4 Oct 2026 · aws.amazon.com
Integrations
ACM integrates with Elastic Load Balancing, Amazon CloudFront, Amazon API Gateway, AWS Elastic Beanstalk, and AWS CloudFormation for public certificates.Read 4 Oct 2026 · aws.amazon.com
Automatic renewal
ACM provides managed renewal for Amazon-issued SSL/TLS certificates, renewing automatically when DNS validation is used or sending email notices as expiration approaches.Read 4 Oct 2026 · docs.aws.amazon.com
AWS launch
Amazon Web Services says it launched in 2006.Read 4 Oct 2026 · aws.amazon.com
Certificate management
Certificates can be centrally managed from the AWS Management Console, AWS CLI, or ACM APIs, and their use can be audited through AWS CloudTrail logs.Read 4 Oct 2026 · aws.amazon.com
Certificate types
ACM supports certificates for singular domain names, multiple specific domain names, wildcard domains, or combinations of these.Read 4 Oct 2026 · docs.aws.amazon.com
Key security
ACM uses AWS Key Management Service to help protect certificate private keys that it stores.Read 4 Oct 2026 · docs.aws.amazon.com
Notable quota
The default quota is 10 domain names per ACM certificate, and customers can request up to 100 domain names.Read 4 Oct 2026 · docs.aws.amazon.com
Third-party certificates
ACM allows customers to import third-party CA certificates and deploy them with Elastic Load Balancers, CloudFront, and APIs on API Gateway; importing certificates does not cost anything.Read 4 Oct 2026 · aws.amazon.com
Who it is for
AWS says ACM can protect websites and applications and secure communication between connected resources such as servers, mobile and IoT devices, and applications.Read 4 Oct 2026 · aws.amazon.com

Plans and prices

Public certificate for integrated AWS services Free Non-exportable · for integrated AWS services Read 4 Oct 2026 · aws.amazon.com
ACME public certificates Price not published Per account per month; charged per domain at issuance and each automatic renewal First 1k FQDNs: $1.00/domain · next 3k FQDNs: $0.50/domain · 4k+ FQDNs: $0.25/domain · first 500 wildcard domains: $5.00/domain · 500+ wildcard domains: $2.50/domain · first 30k API calls: $0 · next 10,000 API calls: $.50 Read 4 Oct 2026 · aws.amazon.com
Exportable public certificates Price not published Upon issuance and again only on certificate renewal First 10K export-certificate API calls: $0 per account per month · next 10,000 API calls: $0.50 per 10k per account per month Read 4 Oct 2026 · aws.amazon.com

Every AWS Certificate Manager plan and price →

Strong points and limits

Strong points

  • Automatic renewal with DNS validation
  • Supports wildcard and multi-domain certificates
  • Integrates with major AWS services
  • Auditable through CloudTrail logs
  • Third-party imports cost nothing

Limits

  • Integrated-services certificates are non-exportable
  • Default quota is 10 domain names
  • Some certificate plans charge per domain
  • No free trial

Who it suits

ACM suits teams securing websites, applications and communications among servers, mobile devices, IoT devices and applications. It fits AWS environments that need console, command-line or API certificate management.

Verdict

ACM centralizes certificate issuance, deployment and renewal across AWS-connected workloads. Its integrations and API access are broad, while export limits and domain-based charges matter for certificate planning.

Where Specifiction places it

Alternatives to AWS Certificate ManagerAll alternatives →