acm

Automate AWS Certificate Manager certificate lifecycle management via AWS CLI.

3|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/david-2814/claw-aws --skill acm
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: acm
Source: https://github.com/david-2814/claw-aws/tree/main/skills/acm
Command: npx skills add https://github.com/david-2814/claw-aws --skill acm

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manage AWS Certificate Manager certificates, validation, renewal, and import for ALB, CloudFront, and API Gateway via AWS CLI.

Core Features & Use Cases

  • Provision, validate, renew, and import ACM certificates for your load balancers and CDN endpoints.
  • Support DNS and email validation flows, and inspect certificate status and renewal windows.
  • Use cases include securing ALB listeners, CloudFront distributions, and API Gateway custom domains with ACM certificates.

Quick Start

Use AWS CLI commands (aws acm) to request, import, or renew certificates for ALB, CloudFront, and API Gateway.

Frequently Asked Questions about acm

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate ACM certificate validation and renewal for AWS load balancers?

Automate AWS Certificate Manager certificate validation and renewal for ALB, CloudFront, and API Gateway by using AWS CLI commands to handle DNS or email validation flows and inspect renewal windows.

How do I request and import ACM certificates for CloudFront distributions?

Request and import ACM certificates for CloudFront distributions by running AWS CLI commands, ensuring certificates are provisioned in the us-east-1 region to successfully attach them to your CDN endpoints.

Do I need specific IAM permissions to manage AWS Certificate Manager certificates via CLI?

Yes, managing AWS Certificate Manager certificates via CLI requires IAM permissions for acm:* actions, AWS CLI v2, and certificates located in us-east-1 for CloudFront deployments.

What is the difference between DNS and email validation for AWS Certificate Manager?

DNS and email validation are supported flows for AWS Certificate Manager certificates, where DNS validation automates renewal through CNAME records while email validation sends approval requests to domain administrators.

Can I use AWS Certificate Manager certificates to secure API Gateway custom domains?

Yes, you can secure API Gateway custom domains by requesting and validating AWS Certificate Manager certificates via AWS CLI, then attaching the validated certificates to your custom domain mappings.

Why does my CloudFront deployment require an ACM certificate in us-east-1?

CloudFront deployments require ACM certificates in us-east-1 because AWS global CDN endpoints only fetch certificates from the us-east-1 region to ensure worldwide distribution and secure listener attachments.