What is our primary use case?
My main use case for
AWS Certificate Manager involves using it with
Elastic Cloud balancing and CloudFront to ensure integration and that the lifecycle of certificates is well managed, with my primary use case being the automated provisioning and management of SSL/TLS certificates at scale.
In a recent project, I architected a highly scalable e-commerce platform using AWS services, with AWS Certificate Manager being highly instrumental in ensuring that we leverage it for automatic deployments with elastic load balancing to secure traffic between the clients and application, which was also fundamental to maintaining a strong security posture with our scaling operations.
AWS Certificate Manager eliminates the operational overhead associated with manual certificate lifecycles, so we had continuous security and compliance.
How has it helped my organization?
AWS Certificate Manager has impacted my organization positively in many different ways, significantly improving our security posture, operational efficiency, and critical risk mitigation while streamlining our security compliance and preventing costly downtime, especially due to the automated certificate renewal that eliminated our manual processes, significantly reducing our engineering workload and accelerating deployment cycles.
We used to manage our various certificates with a website subscription, but with AWS Certificate Manager, we no longer needed to spend so much money on that, delivering what I would call a near-zero reduction in expiration-related downtime incidents, meaning we never had issues with expired certificates or licenses, thus significantly reducing costs and improving our system reliability.
What is most valuable?
The best features AWS Certificate Manager offers include many robust features, with one that I find essentially useful being the ability to go beyond traditional SSL or TLS by providing seamless integration for scalable microservices architecture and robust multi-domain management for complex environments. I have used it for maintaining a strong security posture while having very minimal operational overhead, helping with our scalable architecture and simplifying securing inter-service communication via mutual TLS, integrating very directly with our various
AWS services such as API Gateway, ALBs, and EKS for automated provisioning and renewal.
AWS Certificate Manager has helped my team and projects significantly through seamless integration on multi-domain management, solving the critical challenge of configuration sprawl and manual renewal overhead by enabling a scalable and compliant system that minimizes the operational friction associated with security, particularly through its integration with elastic load balancing and CloudFront, preventing configuration drifts especially within our distributed architecture.
What needs improvement?
There is always room for improvement for every product and service, and one aspect I can identify is the need for enhanced automation, especially for complex enterprise-scale renewal workflows, along with the need to expand integration capabilities for hybrid cloud environments, which is crucial for AWS Certificate Manager.
The user interface of AWS Certificate Manager can definitely be designed to cater to complex integration capabilities, especially for hybrid cloud environments, making it easier for both senior and junior engineers to work easily. A modernized UI would streamline certificate lifecycle management along with clearer documentation, which is crucial for complex deployments and troubleshooting.
For how long have I used the solution?
I have been using AWS Certificate Manager for the past eight years, so it has been a long foray around optimizing workflows and ensuring a robust security posture.
What do I think about the stability of the solution?
AWS Certificate Manager is stable, and it has been working very efficiently.
What do I think about the scalability of the solution?
In terms of scalability, AWS Certificate Manager allows us to scale based on the demand for the day, and it has been really great with automated renewal and management at scale.
How are customer service and support?
Customer support has been very efficient with AWS, as we are able to get support whenever we need it. AWS has been great with customer service and their robust support system has helped a lot with integrating into our overall business strategy.
On a scale of one to ten for customer support, I would rate it nine out of ten, as it has been very efficient with implementing scalable frameworks while accommodating needs without compromising quality.
Which solution did I use previously and why did I switch?
Before integrating with AWS Certificate Manager, we used some other OpenSSL and third-party commercial CAs, with the need for operational efficiency, scalability, and risk mitigation being the reasons for switching, which AWS Certificate Manager helps significantly with.
What was our ROI?
I have seen a return on investment with AWS Certificate Manager, as it saves us a lot of costs because we no longer need to subscribe to manage our certificates through a third party, leading to great operational efficiency and scalability benefits along with drastic cost savings due to the free certificates.
What's my experience with pricing, setup cost, and licensing?
My experience with AWS Certificate Manager regarding pricing, setup cost, and licensing has been seamless, as the pricing has been quite transparent. Since public SSL and TLS certificates are free when deployed to AWS services, it significantly reduced our overall cost, while the setup cost is close to zero due to most of the setup being automated, with licensing being basically integrated and eliminating complex purchasing negotiations, making it a fantastic experience.
Which other solutions did I evaluate?
Before choosing AWS Certificate Manager, we evaluated other options, as we were looking for tools that would efficiently provide us with scalability, operational efficiency, and risk mitigation, along with seamless integration especially with cloud services. After all our checks, AWS Certificate Manager made it to the top, which is why we went for it.
What other advice do I have?
On a scale of one to ten, I rate AWS Certificate Manager at eight, as it has been wonderful using it, and while I see room for improvement, if those improvements are made, I believe it could easily reach a ten.
Regarding AWS Certificate Manager's governance and security capabilities, the tool has been great and I believe it has a robust certificate management system.
As for AWS Certificate Manager's accuracy and reliability of output, the output has been great, though I personally prefer to verify and ensure that the output is actually in conformity with our production.
In terms of deployment, I have worked on various projects where some are in the public cloud with AWS and Azure, while others are hybrid, keeping some parts in the public cloud and some on-premises, and for some projects, it is actually private cloud, depending on the usage and the customer's preference.
I primarily use AWS for AWS Certificate Manager, making it largely AWS.
For those looking into using AWS Certificate Manager, my advice is that it is great to leverage AWS Certificate Manager for tight integration with AWS services, being a great product for automated renewal and streamlined security management, with successful implementation depending on a strategic approach, including having a clear certificate policy from the outset to distinguish between public and private certificate needs for compliance and optimized costs.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)