AWS Builder Center is the official home for builders on AWS. Share and read what others are working on, follow people who inspire you, explore training and workshops, and find tools to support what you're building.
Can I use a customer managed AWS KMS key to encrypt the private key of an ACM certificate?
I want to encrypt the private key of an AWS Certificate Manager (ACM) issued public certificate. I want to use a customer managed AWS Key Management Service (AWS KMS) key instead of the default AWS managed KMS key.
Resolution
ACM uses an AWS managed KMS key to encrypt the private keys of certificates. You can't replace the encryption key with a customer managed AWS KMS key.
To use the private key to install a certificate on a service that isn't integrated with ACM, request the certificate from the third-party provider. Use the certificate directly with the non-integrated service. To use the certificate with an ACM integrated service, import the certificate from the third-party provider into ACM.
Related information
- Sprache
- English
Relevanter Inhalt
- AWS OFFICIALAktualisiert vor 9 Monaten