Exam AWS Certified SysOps Administrator - Associate topic 1 question 454 discussion

This is the correct approach. It requests the certificate in the development account where the application is deployed, ensuring the certificate can be used with the application's resources. It also acknowledges the cross-account DNS validation challenge by using Route 53 in the shared account to create the necessary validation records.

Answer is C Requesting an ACM certificate is usually a two-step activity: 1. Request a certificate for a domain. 2. Verify your ownership of that domain. Step 2 is done by adding specific DNS records in your DNS. However, AWS makes step 2 easier for users that are requesting an ACM for a domain that is managed using Route 53 in the same account by adding the records almost automatically (at a click-of-a-button). Nonetheless, in case someone is not using Route 53 as DNS, or is using Route 53 in another account, then back to the original way of verification. Not to mention that the ACM Certificate is must be at the same account & region that you want to use it in.

ChatGPT states the answer is C.

VOTE C

Option C

For customers who are using Amazon Route 53 DNS to manage DNS records, the ACM console can add records to your DNS configuration for you when you request a certificate. Your Route 53 DNS hosted zone for your domain must be configured in the same AWS account as the one you are making the request from, and you must have sufficient permissions to make a change to your Amazon Route 53 configuration.