A global IT firm is planning to host an intranet HR web application on EC2 instance behind ELB. This HR application has multiple domains & will be accessed from their regional offices spread across the globe. To reduce latency & have enhanced performance, they are planning to deploy this web application in respective AWS regions. At all these locations, ELB will be deployed to provide high availability across multiple EC2 instances. IT Team has purchased SSL/TLS certificates from a third-party vendor for existing web applications which they want to reuse while deploying applications in AWS cloud infrastructure. IT head is concerned about reusing these certificates along with managing the expiration of these certificates. Which of the following is true with regards to certificate installation for ELB in the above case?

Answer options:

A.The certificate needs to be imported in each region where ELB is deployed & ACM will be performing the renewal of certificates.
B.The certificate needs to be imported in each region where ELB is deployed & ACM will not perform the renewal of certificates.
C.The certificate needs to be imported in US East Region& use for all ELB in different regions whileACM will not perform the renewal of certificates.
D.The certificate needs to be imported into US East Region& use for all ELB in different regions whileACM will be performing the renewal of certificates.

Correct Answer – B
With ACM, SSL/TLS certificates can be imported which are issued by a third-party vendor. ACM certificates are regional resources. So it needs to be imported in each region where ELB is deployed. Also, for imported certificates, ACM does not manage the expiration of certificates & this needs to be taken care of by the customer.
Option A is incorrect as ACM does not manage the renewal of imported certificates & needs to be managed by the customer.
Option C is incorrect as the Certificate needs to be imported in US East Region only if the certificate needs to be used with Amazon CloudFront. For ELB, the certificate needs to be imported in each region where ELB is deployed.
Option D is incorrect as the Certificate needs to be imported in US East Region only if the certificate needs to be used with Amazon CloudFront. Also, for imported certificates, ACM does not manage certificate renewals.
For more information on importing certificates with ACM, refer to the following URL
https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html