A company wants HTTPS on their Application Load Balancer using a managed, auto-renewing TLS certificate at no additional certificate cost. Which service provides this?
A) AWS Certificate Manager (ACM).
B) AWS KMS.
C) AWS Secrets Manager.
D) Amazon CloudFront only.
Correct Answer: A
Explanation: AWS Certificate Manager provisions free public TLS certificates and handles automatic renewal, integrating directly with ALB, CloudFront, and API Gateway. (B) KMS manages encryption keys. (C) Secrets Manager stores secrets, not public auto-renewing certs for ALBs. (D) CloudFront uses ACM certs but isn’t the certificate service itself.