AWS Certificate Manager
AWS Certificate Manager: A strong AWS-native certificate manager with flexible issuance and deployment options. Ranked #14 of 31 in Certificate Management Software by our editors (7.9/10); pricing: Free plan; best for AWS users needing managed certificates.
At a glance
- Editor score7.9 / 10
- PricingFree plan
- Best forAWS users needing managed certificates
- Free planYes
- Paid from$0.25/unit usage-based
- Facts checked20 Sep 2026
Where it wins
- Free public certificates for services integrated with AWS Certificate Manager
- Managed renewal and automatic deployment for eligible AWS-issued certificates
- ACME issuance, imports, exports, revocation, and CloudTrail auditing
Where it doesn't
- Managed renewal depends on certificate origin and service integration
- Imported and ACME certificates require customer- or client-driven renewal
- Exportable certificates add per-domain or per-wildcard-domain charges
Our verdict on AWS Certificate Manager
AWS Certificate Manager provisions, stores, manages, and deploys public and private SSL/TLS certificates for AWS services and customer-managed infrastructure. It suits teams running workloads across services such as Elastic Load Balancing, Amazon CloudFront, API Gateway, Amazon EKS, AWS Elastic Beanstalk, and AWS CloudFormation. ACM also supports imported third-party certificates, ACME-based issuance, exportable public certificates, and private certificates issued through AWS Private CA, giving AWS-focused teams several ways to manage certificate lifecycles.
Pricing is usage-based rather than organized into subscription plans. Public certificates for integrated AWS services cost $0 per certificate and are non-exportable. ACME public certificates cost $1 per domain per month for the first 1,000 FQDNs, $0.50 for the next 3,000 FQDNs, and $0.25 for 4,000+ FQDNs. ACME wildcard domains cost $5 per domain per month for the first 500 and $2.50 per domain per month above 500. Exportable public certificates cost $7 per standard FQDN or $79 per wildcard domain. This structure favors AWS-integrated deployments, while external workloads may require paid exportable certificates.
Operationally, ACM combines managed renewal for eligible Amazon-issued certificates with automatic deployment to integrated AWS services. It supports certificate revocation through the console, CLI, or API, ACME client-driven renewal, certificate key storage, and CloudTrail auditing of certificate use. The key limitation is that renewal and deployment behavior varies by certificate origin and integration: imported and ACME certificates require customer- or client-driven renewal, and exportable certificates are priced separately. Choose ACM when AWS services are central to your environment and AWS integration matters most; consider another certificate manager when your primary need is a broader platform-neutral workflow.
Your product? Our editors can test AWS Certificate Manager in depth and publish a review, labelled as paid · from $149/mo →
AWS Certificate Manager pricing
All 10 AWS Certificate Manager plans and prices →
AWS Certificate Manager fact sheet
| Free plan | Yes |
|---|---|
| Paid from | $0.25/unit usage-based |
| Certificate discovery | Not verified |
| Automatic renewal | Yes |
| Deployment automation | Yes |
| Revocation workflows | Yes |
| Certificate types | Tls |
| CA integrations | Yes |
| Deployment | Cloud |
| Platforms | Web |
| Support | Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 12 integrations: Elastic Load Balancing, Amazon CloudFront, Amazon API Gateway, Amazon EKS, AWS Elastic Beanstalk, AWS App Runner … See all → |
| Pricing | Free plan (source) |
| Website | aws.amazon.com |
| Facts checked | 20 Sep 2026 |
AWS Certificate Manager integrations
AWS Certificate Manager lists 12 integrations on its own site.
- Elastic Load Balancing
- Amazon CloudFront
- Amazon API Gateway
- Amazon EKS
- AWS Elastic Beanstalk
- AWS App Runner
- AWS CloudFormation
- AWS Amplify
- Amazon OpenSearch Service
- AWS Network Firewall
- Amazon Cognito
- AWS Nitro Enclaves
See all AWS Certificate Manager integrations →
Alternatives to AWS Certificate Manager
- DigiCert Trust Lifecycle ManagerA broad certificate governance platform for hybrid infrastructure and enterprise PKI.9.4
- DigiCert ONEFull certificate lifecycle control for large organizations managing diverse trust environments.9.3
- Keyfactor PlatformA broad certificate lifecycle platform for hybrid enterprise environments.9.1
See all AWS Certificate Manager alternatives →
Used AWS Certificate Manager? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used AWS Certificate Manager for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
AWS Certificate Manager is listed in our Certificate Management Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/aws-certificate-manager/"><img src="https://www.itechguides.com/best/badge/aws-certificate-manager.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update