A start-up firm has installed a web application on multiple Amazon EC2 instances behind an Application load balancer in the us-west-1 region. SSL termination is done on ALB integrated with AWS ACM (AWS Certificate Manager) for SSL certificate provisioning and maintenance. The same setup is planned to be implemented in the ap-south-1 region. You are engaged for AWS ACM readiness in this region.
What setting with AWS ACM will suffice this requirement?

Answer options:

A.Create an AWS ACM certificate in the ap-south-1 region & provision a new SSL certificate.
B.Create an AWS ACM certificate in the ap-south-1 region & copy the SSL certificate from the us-west-1 region to the ap-south-1 region.
C.Create another SSL Certificate in AWS ACM of us-west-1 region & use it for web-application in ap-south-1 region.
D.Create a new ACM certificate in us-west-1 region & use SSL certificate from us-west-1 region for web-application in ap-south-1 region.

Correct Answer: A
AWS ACM certificates are regional resources. To use these certificates in a multi-region setup, certificates need to be provisioned at each region where the application is deployed. In the above case, a new certificate needs to be issued in the ap-south-1 region.
Option B is incorrect as AWS ACM SSL certificates cannot be copied between regions.
Option C is incorrect as AWS ACM is a regional service, SSL certificate in the us-west-1 region cannot be used for web application in the ap-south-1 region.
Option D is incorrect as AWS ACM is a regional service, AWS ACM certificate in the us-west-1 region cannot be used for web application in the ap-south-1 region.
For more information on AWS ACM, refer to the following URL,
https://docs.aws.amazon.com/acm/latest/userguide/acm-regions.html