利用可导出公钥证书实现证书管理自动化 [重复].pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.S E C 3 2 2-RAutomating Certificate Management with Exportable Public CertificatesPravin Nair(he/him)Senior Security SAAmazon Web ServicesZach Miller(he/him)Principa

2、l Security SAAmazon Web Services 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Senior Security SAAmazon Web ServicesBoston,MAPravin NairPrincipal Security SAAmazon Web ServicesChicago,ILZach MillerIntroductions 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.A

3、genda01ACM Exportable public certificate overview02Challenges with installing exportable certificates03Automation solution deep dive04Solution demo05Summary+Q&A 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Built-in access control,auditing,and monitoring using integrated AWS ser

4、vicesAutomates renewal for your certificates,reducing risk of expirationUnifies certificate management across AWS,on-premises,and other cloud providersAWS Certificate Manager introduces exportable public certificates you can use anywhere 2025,Amazon Web Services,Inc.or its affiliates.All rights rese

5、rved.Export ACM-managed public TLS certificates1.Servers on third-party cloud providers2.On-premises systems3.Next-generation firewalls4.Amazon EC2 instances,containers,and more!2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.$149$149 per wildcard name exported certificatee.g.*$15

6、$15per Fully Qualified Domain Name(FQDN)exported Only pay once for the lifetime of the certificateOnce per exportable certificate in their monthly billing cycleAgain,when ACM or the customer renews the certificateNote:Export certificate validity is 395 days(13 months)AvailabilityIn all regions where