Jurisdictional exposure
Attributes
- SLA Uptime
- 99.9%
- Auto Renew
- Yes
Sub-services (3)
ACM Public Certificates
Free public TLS certificates with automatic renewal
ACM Private CA
Managed private certificate authority for internal PKI hierarchies
Imported Certificates
Bring-your-own third-party certificates stored in ACM
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Sovereign regions (6)
- AWS European Sovereign Cloud (Brandenburg) · BrandenburgAWS European Sovereign Cloud
- AWS GovCloud (US-East) · AshburnAWS GovCloud (US)
- AWS GovCloud (US-West) · HillsboroAWS GovCloud (US)
- AWS European Sovereign Cloud (Brandenburg) · BrandenburgAWS European Sovereign Cloud
- China (Beijing) · BeijingAWS China (Sinnet)
- China (Ningxia) · YinchuanAWS China (NWCD)
Commercial regions (34)
Europe (8)
- Europe (Paris)
- Europe (Frankfurt)
- Europe (Ireland)
- Europe (Milan)
- Europe (Spain)
- Europe (Stockholm)
- Europe (Zurich)
- Europe (London)
North America (7)
- Canada West (Calgary)
- Canada (Central)
- Mexico (Central)
- US East (N. Virginia)
- US West (Oregon)
- US East (Ohio)
- US West (N. California)
South America (1)
- South America (São Paulo)
Asia (11)
- Asia Pacific (Hong Kong)
- Asia Pacific (Hyderabad)
- Asia Pacific (Mumbai)
- Asia Pacific (Jakarta)
- Asia Pacific (Osaka)
- Asia Pacific (Tokyo)
- Asia Pacific (Malaysia)
- Asia Pacific (Singapore)
- Asia Pacific (Seoul)
- Asia Pacific (Taipei)
- Asia Pacific (Thailand)
Oceania (3)
- Asia Pacific (Melbourne)
- Asia Pacific (Sydney)
- Asia Pacific (New Zealand)
Middle East (3)
- Middle East (Bahrain)
- Israel (Tel Aviv)
- Middle East (UAE)
Africa (1)
- Africa (Cape Town)
Tags
Equivalent services on other platforms
Centralised vault for cryptographic keys, secrets, and certificates with HSM-backed keys, managed certificate renewal, and RBAC or access-policy enforcement
Centralised TLS certificate provisioning and lifecycle management across Google-managed and self-managed certs, with wildcard and SAN support, automatic renewal, and deployment to External Application Load Balancers, Cross-Cloud Network Load Balancers, and Cloud Run
Hosted private PKI for issuing and managing X.509 certificates inside an organisation — root and subordinate CAs, automated lifecycle (rotation, revocation), and Cloud KMS-backed signing keys, replacing self-managed OpenSSL or Active Directory CS deployments
Managed public and private TLS certificate service with private CA hierarchies, automatic rotation, wildcard and SAN support, and native integration with Load Balancer, API Gateway, and the OCI Web Application Firewall