Your company starts to use AWS Certificate Manager to manage all the existing certificates. If new certificates are required, they need to be either requested from ACM or imported directly to ACM. ACM becomes the central place to manage the certificates. In which of the following services can you install the ACM certificates? (Select TWO.)

Answer options:

A.A Lambda function written by Python 3.8.
B.A CloudFront distribution that needs to serve secure content over SSL/TLS.
C.A new record set in Route 53 which uses the Failover routing policy.
D.An Elastic Beanstalk Environment`s load balancer that needs to terminate HTTPS.
E.A FIFO (First-In-First-Out) queue in Simple Queue Service.

Correct Answer – B, D
Check https://docs.aws.amazon.com/acm/latest/userguide/acm-services.html for the supported services integrated with AWS Certificate Manager.
Option A is incorrect: Because a Lambda function cannot directly install an ACM certificate. However, you can install one in API Gateway.
Option B is CORRECT: CloudFront integrates with AWS Certificate Manager, and the certificate of ACM can be installed in the CloudFront distribution to serve the SSL/TLS traffic.
Option C is incorrect: Because a record set is used for DNS queries and does not need to install a certificate.
Option D is CORRECT: Because you can configure an HTTPS listener for the load balancer in the Elastic Beanstalk Environment. The ACM certificate can be installed in the listener.
Option E is incorrect: Because SQS cannot integrate with ACM and install certificates from ACM.