AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 62

Question

A company is deploying a new public web application to AWS. The application will run behind an Application Load Balancer (ALB). The application needs to be encrypted at the edge with an SSL/TLS certificate that is issued by an external certificate authority (CA). The certificate must be rotated each year before the certificate expires. What should a solutions architect do to meet these requirements?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Use AWS Certificate Manager (ACM) to import an SSL/TLS certificate. Apply the certificate to the ALB. Use Amazon EventBridge (Amazon CloudWatch Events) to send a notification when the certificate is nearing expiration... Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS Certificate Manager provisions and renews TLS certificates automatically. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 62