aws-cdk.aws-certificatemanager

What it is and what it does

This package provides CDK Constructs that wrap AWS Certificate Manager (ACM) functionality, allowing you to define SSL/TLS certificate provisioning as code within your infrastructure stack. It handles the complexity of creating, validating, and renewing certificates for domains, subdomains, and wildcard domains, with support for both public and private certificates. The library integrates with Route 53 for automated DNS validation, supports email validation as a fallback, and includes utilities for cross-region certificates needed by CloudFront.

The package depends on core CDK modules (aws-cdk.core, constructs, jsii) and integrates with related AWS services like Route 53, IAM, CloudWatch, and Private Certificate Authority. Because ACM certificate validation can take time—especially with manual DNS methods—the documentation recommends provisioning certificates in separate stacks or importing pre-existing certificates. The package also provides CloudWatch metrics for monitoring certificate expiry and creating renewal alarms.

Use it for:

• Automate SSL/TLS certificate provisioning for web applications deployed via CDK, with Route 53 DNS validation.
• Create cross-region certificates for CloudFront distributions that require certificates in us-east-1.
• Issue private certificates from a Private Certificate Authority for internal service-to-service communication.
• Set up CloudWatch alarms to monitor certificate expiry and trigger renewal workflows before expiration.
• Import existing ACM certificates into CDK stacks by ARN for use with load balancers and CloudFront.
• Provision multi-domain certificates with subject alternative names across multiple Route 53 hosted zones.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Provides AWS CDK Constructs for provisioning and managing ACM certificates with DNS or email validation, cross-region support, and private certificate issuance.

No—this package is end-of-support. AWS CDK v1 reached end-of-support on 2023-06-01 and this library is no longer being updated. Users should migrate to AWS CDK v2, which has a replacement package. Installing this package locks you into an unsupported framework version and exposes you to unpatched security issues in the v1 runtime.

Install

aws-cdk-aws-certificatemanager on PyPI

pip install aws-cdk-aws-certificatemanager

uv add aws-cdk-aws-certificatemanager

poetry add aws-cdk-aws-certificatemanager

Installing aws-cdk.aws-certificatemanager

Before you install

Low install friction with pure Python wheel distribution. Package is actively maintained in the AWS CDK repository, though marked as Development Status 7 (Inactive) because AWS CDK v1 reached end-of-support on 2023-06-01; users should migrate to AWS CDK v2.

License in practice

Licensed under Apache-2.0 (permissive), allowing use in commercial and open-source projects with minimal restrictions.

Quickstart

pip install aws-cdk.aws-certificatemanager

import aws_cdk.aws_certificatemanager as acm
import aws_cdk.aws_route53 as route53

hosted_zone = route53.HostedZone(self, "HostedZone", zone_name="example.com")
cert = acm.Certificate(self, "Certificate",
    domain_name="hello.example.com",
    validation=acm.CertificateValidation.from_dns(hosted_zone)
)

Requires AWS CDK v1 environment; AWS CDK v1 is end-of-support as of 2023-06-01 and users should migrate to AWS CDK v2 instead.

Verify before relying

• Whether AWS CDK v2 has a replacement package with equivalent functionality and whether migration path is straightforward.
• Specific account-level ACM certificate request limits and whether the 2000 default limit applies to all regions and account types.

Package facts

Evidence: aws_cdk.aws_certificatemanager-1.204.0-py3-none-any.whl

Tags

More Build Tools packages