ACM now supports automated certificate management for Kubernetes

AWS Certificate Manager (ACM) Automated Certificate Management for Kubernetes

AWS Certificate Manager (ACM) now automates certificate provisioning and distribution for Kubernetes workloads through AWS Controllers for Kubernetes (ACK). This integration extends ACM's automation to any Kubernetes workload for both public and private certificates, enabling you to manage certificates using native Kubernetes APIs.

With ACK, you define certificates as Kubernetes resources, and the ACK controller automates the complete certificate lifecycle: requesting certificates from ACM, exporting them after validation, updating Kubernetes Secrets with the certificate and private key, and automatically updating those Secrets at renewal.

What to do

• Use ACM exportable public certificates for internet-facing workloads or AWS Private CA private certificates for internal services in Amazon EKS or other Kubernetes environments.
• Terminate TLS in application pods (NGINX, custom applications), secure service mesh communication (Istio, Linkerd), and manage certificates for third-party ingress controllers (NGINX Ingress, Traefik).
• Distribute certificates to hybrid and edge Kubernetes environments.

This feature is available in all commercial, AWS GovCloud (US), and AWS China regions where ACM is available.

To learn more, visit the GitHub link or read our documentation and our pricing page.

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.