A pharma company is deploying a new web application on an Amazon EC2 instance launched in multiple AZ. This web application will be accessed by third-party vendors for the latest medical drug formulation information. ELB will be configured to load balance traffic across multiple EC2 instances. To enhance security between clients & EC2 instances, the IT Team has decided to create certificates for this application. Which of the following is an automated way to install certificates for securing this web application?

Answer options:

A.Install ACM certificates on ELB for web application specifying algorithm & key size for the certificate.
B.Install ACM certificates on an EC2 instance for web application specifying algorithm & key size for the certificate.
C.Install ACM certificates on ELB for web applications specifying an algorithm for the certificate.
D.Install ACM certificates on an EC2 instance for web application specifying an algorithm for the certificate.

Correct Answer – A
ACM Certificates cannot be directly added to web applications deployed on Amazon EC2 instances. These need to be added with integrated services which are Elastic Load Balancing, Amazon CloudFront, AWS Elastic Beanstalk, Amazon API Gateway or AWS CloudFormation.
Also, while installing an ACM certificate, algorithm & key size must be specified.
Options B & D are incorrect as ACM cannot be directly installed on the EC2 instance. These need to use along with other integrated services.
Option C is incorrect as While specifying ACM certificate, algorithm & key size must be specified.
For more information on the public certificate provided by ACM, refer to the following URL
https://docs.aws.amazon.com/acm/latest/userguide/acm-certificate.html