AWS ACM adds ACME support for public TLS certificates
AWS Certificate Manager now runs a fully managed ACME server, so you can issue public TLS certificates with standard clients like Certbot while keeping all keys and policies inside ACM. Centralized IAM controls, domain scopes, and CloudTrail logging let PKI teams enforce policies and audit every request.