A company hosts its applications on Amazon EC2 instances. The company must use SSL/TLS connections that encrypt data in transit to communicate securely with AWS infrastructure that is managed by a…

Question

Options

• AStore self-managed certificates on the EC2 instances.
• BUse AWS Certificate Manager (ACM).
• CImplement custom automation scripts in AWS Secrets Manager.
• DUse Amazon Elastic Container Service (Amazon ECS) Service Connect.

• A
  8% (4)
• B
  72% (38)
• C
  6% (3)
• D
  15% (8)

Explanation

AWS Certificate Manager (ACM) simplifies the process of generating, distributing, and managing SSL/TLS certificates. ACM allows you to automatically renew and deploy certificates with minimal operational overhead. Once integrated with services like EC2, ACM can handle the entire lifecycle of the certificates, from creation to renewal and deployment, without manual intervention. Managing certificates manually introduces significant operational overhead. You would need to handle generation, deployment, renewal, and rotation manually, which is error-prone and time- While you could store certificates in AWS Secrets Manager, you would still need to implement custom scripts for certificate generation, rotation, and deployment, increasing operational complexity compared to ACM. Amazon ECS Service Connect is used for simplifying service discovery and communication within ECS. While it can secure traffic between ECS services, it is not designed for managing SSL/TLS certificates on EC2 instances.

No community discussion yet for this question.