# Certificate Manager

## Encryption In Transit vs At Rest

<figure><img src="https://42327672-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRTgPcl2FlnhXAydvRoXO%2Fuploads%2FWr2C11ruw1uYiabj2A8F%2Fimage.png?alt=media&#x26;token=70a933bd-76ce-4baa-bf7d-67f9fd8324ba" alt=""><figcaption></figcaption></figure>

### Asymmetric Encryption

* Asymmetric encryption is also known as public key cryptography
* Messages encrypted with the public key can only be decrypted with  &#x20;the private key
* Messages encrypted with the private key can be decrypted with the  \
  public key
* Examples include SSL/TLS and SSH

<figure><img src="https://42327672-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRTgPcl2FlnhXAydvRoXO%2Fuploads%2FNP6XuE9p2kMKK4hfhPx2%2Fimage.png?alt=media&#x26;token=9c9df4d9-e46d-4183-aee1-b078cb281c82" alt=""><figcaption></figcaption></figure>

AWS Certificate Manager is a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources

Create, store and renew SSL/TLS X.509 certificates

Single domains, multiple domain names and&#x20;wildcards\
\
Integrates with several AWS services including:\
• Elastic Load Balancing\
• Amazon CloudFront\
• AWS Elastic Beanstalk\
• AWS Nitro Enclaves\
• AWS CloudFormation\
\
Public certificates are signed by the AWS public&#x20;Certificate Authority\
You can also create a Private CA with ACM\
Can then issue private certificates\
You can also import certificates from third-party&#x20;issuers

<figure><img src="https://42327672-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRTgPcl2FlnhXAydvRoXO%2Fuploads%2F3oJCrbFckHi87CVap7rq%2Fimage.png?alt=media&#x26;token=606af05a-f2a2-4f6b-9ab3-3c75890ce073" alt=""><figcaption></figcaption></figure>

<figure><img src="https://42327672-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRTgPcl2FlnhXAydvRoXO%2Fuploads%2FqVIP2zl1EmvRZJoJfsts%2Fimage.png?alt=media&#x26;token=f53137f7-d1f8-4a67-9528-7a555ab6afd6" alt=""><figcaption></figcaption></figure>

<figure><img src="https://42327672-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRTgPcl2FlnhXAydvRoXO%2Fuploads%2F6o7OqH95mqmIq9HDVpE8%2Fimage.png?alt=media&#x26;token=22eb37d0-e0cd-4165-b1cd-7abe833e40cf" alt=""><figcaption></figcaption></figure>

<figure><img src="https://42327672-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRTgPcl2FlnhXAydvRoXO%2Fuploads%2FJncG03wS1aI1zuMv1B4n%2Fimage.png?alt=media&#x26;token=c8bd5b82-db1d-4872-87c6-2df709ee4649" alt=""><figcaption></figcaption></figure>
