Question

A SysOps administrator manages a public-facing website behind an Application Load Balancer using an ACM certificate that was issued with DNS validation. The certificate is approaching its expiration date, and CloudWatch shows the certificate is NOT being automatically renewed. The domain's DNS is hosted in Amazon Route 53 in the same account. What is the MOST likely cause of the failed automatic renewal?

Accepted Answer

The CNAME record that ACM created for DNS validation was deleted or modified in the Route 53 hosted zone.

Answer

ACM certificates must be manually renewed every 13 months; automatic renewal is not supported.

Answer

The certificate must be reissued with email validation to support automatic renewal.

Answer

The ACM certificate is not associated with a CloudFront distribution, which is required for renewal.