Likelihood to Recommend I would always recommend AWS Certificate Manager for anyone using AWS cloud services. The perfect scenario would be with your domain managed by AWS Route 53 as you can obtain auto renewal of certificates with really good security for all your public facing application that uses CloudFront, ALB or API Gateway.
Read full review Venafi allows an engineer to automate the full provisioning process not only installing the certificate to multiple applications but also configuring specific requirements for that application.
Read full review Pros Issue, Renew and Validate SSL Certificates. Allows us to integrate it with other AWS Services. Read full review Digital Certificate Inventory Management and Monitoring Digital Certificate Lifecycle Processes to include ownership and roles and responsibilities Easy automation integration into many common products Certificate Trust Store Management Read full review Cons Sometimes ACM certificates don't work with ELB. No automatic alert on certificate expiration. Read full review The Venafi platform is constantly evolving through its upgrades which occur every quarter to meet client's specific needs. This is an outstanding model however the documentation that follows the upgrades could be more thorough. Read full review Usability AWS historically has had very confusing interfaces. But in recent times they have improved them. AWS Certificate Manager is a clear sample of this. The interface is clear and straightforward, with no useless or cryptic options. Really I can't think of a way the interface could be better with the actual options available.
Read full review Support Rating They do a great job.
Read full review Alternatives Considered Easy to implement within a few clicks, or even from command line, the alternatives doesn't integrate that easy with AWS Application Load Balancers or AWS CloudFront
Read full review Each public certificate provider has their own flavor of certificate automation, but they are not that flexible and only work with their own products. Certified Security Solutions CMS is a lightweight tool that directly competes with Venafi, but is not nearly as robust or feature risk. This is a straight forward management solution that is best fitted for the smaller companies.
Read full review Return on Investment We're saving our spent on SSL certificates As it dosen't costs at all. Limited to AWS only, Certificates issued by ACM can be used with AWS managed services only. It doesn't support automatic domain verification with other DNS management systems. Read full review An outage is a very devastating event to any large corporation and can cost millions. Venafi's ability to prevent these outages has proven to be a great return on investment for our environment and has helped protect the bottom line. Venafi automates certificate installation with an included feature to schedule the install in advance. This is a great benefit of the tool because it eliminates human error and prevents any forgotten or overlooked certificates to be renewed. After installation Venafi will also validate the certificate to confirm that it has been installed properly. This shows just how thorough this tool really is. Security compliance is of the utmost importance in a large organization for auditing purposes and certificate security policies but at times can prove to be difficult to enforce. Venafi has proven to play a pivotal role in enforcing these policies in our environment. Read full review ScreenShots