AWS Certificate Manager

Issues, stores and automatically renews public and private TLS certificates for AWS services.

Provider: aws
Kind: Key management
Category: Security
Official docs: https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html
Also known as: ACM

Properties · 5 set by this component

property	type	values	required	kind default	this component
certificateSource · component property	enum	amazon-issued \| private-ca \| imported	no	amazon-issued	inherited
envelopeEncryption	boolean	—	no	false	▸ true
exportable · component property	boolean	—	no	false	inherited
hsm	boolean	—	no	false	▸ false
keyAlgorithm · component property	enum	rsa-2048 \| rsa-4096 \| ec-prime256v1 \| ec-secp384r1	no	rsa-2048	inherited
managed	boolean	—	no	true	▸ true
rotationAutomated	boolean	—	no	false	▸ true
rotationDays	integer	—	no	—	▸ 198
transparencyLogging · component property	boolean	—	no	true	inherited
validationMethod · component property	enum	dns \| email \| http	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "acm", component: "aws-acm" }

Other Key management products · 53

Certificate Management Servicealibaba-certificate-managementalibabacloudkey-management Data Encryption Servicealibaba-data-encryption-servicealibabacloudkey-management AWS KMSaws-kmsawskey-management AWS Payment Cryptographyaws-payment-cryptographyawskey-management AWS Private Certificate Authorityaws-private-caawskey-management AWS Secrets Manageraws-secrets-managerawskey-management AWS Signeraws-signerawskey-management AWS Systems Manager Parameter Storeaws-ssm-parameter-storeawskey-management AWS CloudHSMcloudhsmawskey-management Artifact Signingazure-artifact-signingazurekey-management Azure Cloud HSMazure-cloud-hsmazurekey-management Azure Dedicated HSMazure-dedicated-hsmazurekey-management Azure Key Vaultazure-key-vaultazurekey-management Azure Key Vault Managed HSMazure-managed-hsmazurekey-management Advanced Certificate Managercloudflare-advanced-certificate-managercloudflarekey-management Cloudflare Geo Key Managercloudflare-geo-key-managercloudflarekey-management Cloudflare Keyless SSLcloudflare-keyless-sslcloudflarekey-management Cloudflare mTLS client certificatescloudflare-mtlscloudflarekey-management Cloudflare Origin CAcloudflare-origin-cacloudflarekey-management Cloudflare Secrets Storecloudflare-secrets-storecloudflarekey-management Cloudflare Universal SSLcloudflare-ssl-tlscloudflarekey-management Bitwardenbitwardenkey-management cert-managercert-managerkey-management CyberArk Conjurconjurkey-management Dopplerdopplerkey-management EJBCAejbcakey-management Entrust nShield HSMentrust-nshieldkey-management HashiCorp Vaulthashicorp-vaultkey-management HCP Vault Dedicatedhcp-vaultkey-management Infisicalinfisicalkey-management Generic key managementkey-managementkey-management 1Password Connectonepassword-connectkey-management OpenBaoopenbaokey-management Sealed Secretssealed-secretskey-management Smallstep step-castep-cakey-management Thales Luna HSMthales-luna-hsmkey-management Certificate Authority Servicegoogle-certificate-authority-servicegcpkey-management Certificate Managergoogle-certificate-managergcpkey-management Cloud External Key Managergoogle-cloud-ekmgcpkey-management Cloud HSMgoogle-cloud-hsmgcpkey-management

and 13 more → Key management page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# AWS Certificate Manager: issues, stores and renews public and private TLS certificates for
3# integrated AWS services. "AWS Certificate Manager concepts": each ACM certificate is valid for
4# 198 days, the default root of trust is Amazon Root CA 1 (2048-bit RSA), transparency logging is
5# mandatory, and ACM encrypts the private key with a KMS key. "Managed certificate renewal":
6# DNS-validated Amazon-issued certificates renew automatically; imported certificates never do.
7schemaVersion: "1"
8type: "component"
9id: "aws-acm"
10kind: "key-management"
11provider: "aws"
12docs: "https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html"
13aliases: ["ACM"]
14defaults:
15  managed: true
16  hsm: false
17  rotationAutomated: true
18  rotationDays: 198
19  envelopeEncryption: true
20properties:
21  certificateSource:
22    type: "enum"
23    values: ["amazon-issued", "private-ca", "imported"]
24    default: "amazon-issued"
25  validationMethod:
26    type: "enum"
27    values: ["dns", "email", "http"]
28  keyAlgorithm:
29    type: "enum"
30    values: ["rsa-2048", "rsa-4096", "ec-prime256v1", "ec-secp384r1"]
31    default: "rsa-2048"
32  transparencyLogging:
33    type: "boolean"
34    default: true
35  exportable:
36    type: "boolean"
37    default: false

The same page as markdown, for an agent: /catalogue/components/aws-acm.md