AWS Certificate Manager vs. PrimeKey by Keyfactor

I would always recommend AWS Certificate Manager for anyone using AWS cloud services. The perfect scenario would be with your domain managed by AWS Route 53 as you can obtain auto renewal of certificates with really good security for all your public facing application that uses CloudFront, ALB or API Gateway.

Incentivized

• easy to generate ssl certificates
• free ssl certificates
• ability to import private ssl certificates
• integrates well with other AWS services

Incentivized

• It doesn't support automatic domain verification with other domain name services.
• Limited to AWS only, Certificates issued by ACM can be used with AWS managed services only.
• If you are having multi-region infrastructure then you'll need to issue an SSL certificate for a domain in each region.

AWS historically has had very confusing interfaces. But in recent times they have improved them. AWS Certificate Manager is a clear sample of this. The interface is clear and straightforward, with no useless or cryptic options. Really I can't think of a way the interface could be better with the actual options available.

Incentivized

They do a great job.

Incentivized

Easy to implement within a few clicks, or even from command line, the alternatives doesn't integrate that easy with AWS Application Load Balancers or AWS CloudFront

Incentivized

• switching from paid expensive SSL certificates to free ones generated by ACM
• quick deployment and validation of certificates
• integration with other AWS services

Incentivized