AWS Certificate Manager - 用户指南

1 AWS Certificate Manager Certificate Manager AWS Certificate Manager : Copyright Amazon Web Services, Inc. and/or its affiliates. All rights 's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's,in any manner that is likely to cause confusion among customers, or in any manner that disparages or discreditsAmazon. All other trademarks not owned by Amazon are the property of their respective owners, who may or may notbe affiliated with, connected to, or sponsored by Certificate Manager Table of Contents AWS Certificate Manager .. 1 ACM ?

2 1 ACM .. 1 .. 3 .. 3 .. 5 .. 5 API .. 6 .. 7 .. 8 .. 8 ACM .. 9 Identity and Access 9 .. 9 .. 10 .. 10 .. 12 .. 13 .. 13 .. 16 ACM API .. 18 .. 19 .. 19 .. 19 AWS 20 .. 20 .. 20 .. 20 .. 21 AWS CloudTrail .. 22 .. 23 AWS 23 Sign up for 23 IAM .. 23 .. 24 .. 24 WHOIS .. 24MX .. 25 25 .. 27 .. 27 .. 27 CLI .. 28 .. 29 CA .. 30 ACM .. 30 CLI .. 31 .. 32 DNS .. 33 .. 36 .. 38 .. 38 CLI.

3 39 Certificate Manager .. 40 .. 40 CLI .. 40 .. 42 .. 42 CLI .. 42 .. 42 Managed 43 DNS 43 Email 44(Optional) Request 44 Automating email 45 Private PKI 46 Check renewal 47 ( ).. 48 (API).. 48 (CLI).. 48 Check the status using Personal Health Dashboard (PHD).. 48 Test managed renewal (private PKI).. 49 .. 50 .. 50 .. 51 .. 52 .. 52 AWS CLI .. 53 .. 53 .. 54 AWS CLI .. 54 .. 55 .. 55 CLI .. 55 ACM .. 57 .. 57 .. 57 .. 57 CLI .. 59 .. 59 .. 60 CloudWatch .. 60 CloudWatch 60 Lambda.

4 61 .. 66 66 API .. 66 API .. 75 ACM 95 Certificate Manager 100 .. 100 .. 100 .. 100 .. 101 DNS .. 102 .. 104 .. 106 .. 106 .. 107 .. 111 CAA .. 111 .. 111 .. 112 API .. 112 .. 112 ACM SLR .. 112 .. 2 .. 115 ACM .. 115 ACM 116 .. 117 .. 117 .. 117 .. 117 .. 118 .. 118 .. 119 (FQDN).. 119 .. 119 .. 119 (SSL).. 119 119 SSL .. 120 .. 120 (TLS).. 120 .. cxxiv Certificate Manager ACM ?

5 AWS Certificate Manager AWS Certificate Manager ACM SSL/TLS AWS AWS (p. 3) ACM (p. 50)ACM ACM ACM (p. 55) ACM ACM Private CA PKI ACM ?AWS 1. AWS Certificate Manager ACM TLS Web ACM Elastic Load Balancing Amazon CloudFront Amazon API Gateway AWS (p. 3) ACM 2. ACM Private CA AWS (PKI) ACM Private CA (CA) Internet CA ACM Private CA Concepts (p.)

6 115)ACM (p. 1) (p. 3) AWS Certificate Manager (p. 3) (p. 4)API (p. 6) (p. 19)AWS Certificate Manager (p. 7)ACM ACM Note ACM ACM (p. 50) (DV)ACM ACM ACM DNS 2 (p. 36) 1 DNS (p. 33) Certificate Manager ACM ACM 13 395 ACM ACM Managed renewal for ACM certificates (p. 43) ACM Google Chrome Microsoft Internet Explorer MicrosoftEdge Mozilla Firefox Apple Safari SSL/TLS ACM ACM Java ACM ACM (FQDN) ACM ( ) ACM (p.

7 27) ACM (*) ACM *. Note (*) *. *. ( ) *. ACM 2048 RSA (RSA_2048) 4096 RSA (RSA_4096) Elliptic Prime Curve 256 (EC_prime256v1) Elliptic Prime Curve 384 (EC_secp384r1)Important IAM ACM Elastic Load Balancing HTTPS CloudFront SSL/TLS ACM (EV) (OV) ACM SSL/TLS ACM ACM UTF-8 ASCII xn-- (Punycode) ACM Unicode u ACM (p.

8 43) ACM ACM Certificate Manager Amazon ( ) ACM ACM (Amazon Elastic Compute Cloud) Amazon EC2 AWS CertificateManager (p. 3) AWS AWS General Reference AWS ACM ACM Elastic Load Balancing AWS (FQDN) FQDN ACM ACM Amazon CloudFront ACM CloudFront AWS Certificate ManagerAWS Certificate Manager AWS ACM ACM Private CA AWS Note ACM Nitro Enclave (p.

9 4) Amazon EC2 Amazon EC2 Nitro Enclave Amazon EC2 Web Amazon Linux 2 LAMP Web AmazonLinux AMI LAMP Web ACM Elastic Load BalancingElastic Load Balancing Amazon EC2 Elastic LoadBalancing Elastic LoadBalancing SSL/TLS Amazon EC2 SSL/TLS ACM Elastic Load Balancing ACM Application Load BalancerAmazon CloudFrontAmazon CloudFront Web Web

10 CloudFront CloudFront CloudFront Amazon S3 Web CloudFront AmazonCloudFront SSL/TLS CloudFront CloudFront SSL/TLS ACM CloudFront ACM CloudFront SSL/TLS Certificate Manager Note ACM CloudFront AWS Elastic BeanstalkElastic Beanstalk AWS AWS Elastic Beanstalk Elastic Beanstalk Elastic Beanstalk Elastic LoadBalancing Elastic Beanstalk AWS Elastic Beanstalk Elastic Beanstalk Elastic Beanstalk HTTPS Amazon API Gateway (IoT)