---
id: aws-cdk-aws-certificatemanager
version: "1.204.0"
license: Apache-2.0
license_treatment: permissive
maintenance: active
---

# aws-cdk.aws-certificatemanager — The CDK Construct Library for AWS::CertificateManager

License: permissive · Maintenance: active · Downloads: 157.0K/mo

## What it is and what it does

This package provides CDK Constructs that wrap AWS Certificate Manager (ACM) functionality, allowing you to define SSL/TLS certificate provisioning as code within your infrastructure stack. It handles the complexity of creating, validating, and renewing certificates for domains, subdomains, and wildcard domains, with support for both public and private certificates. The library integrates with Route 53 for automated DNS validation, supports email validation as a fallback, and includes utilities for cross-region certificates needed by CloudFront.

The package depends on core CDK modules (aws-cdk.core, constructs, jsii) and integrates with related AWS services like Route 53, IAM, CloudWatch, and Private Certificate Authority. Because ACM certificate validation can take time—especially with manual DNS methods—the documentation recommends provisioning certificates in separate stacks or importing pre-existing certificates. The package also provides CloudWatch metrics for monitoring certificate expiry and creating renewal alarms.

Use it for:

- Automate SSL/TLS certificate provisioning for web applications deployed via CDK, with Route 53 DNS validation.
- Create cross-region certificates for CloudFront distributions that require certificates in us-east-1.
- Issue private certificates from a Private Certificate Authority for internal service-to-service communication.
- Set up CloudWatch alarms to monitor certificate expiry and trigger renewal workflows before expiration.
- Import existing ACM certificates into CDK stacks by ARN for use with load balancers and CloudFront.
- Provision multi-domain certificates with subject alternative names across multiple Route 53 hosted zones.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Provides AWS CDK Constructs for provisioning and managing ACM certificates with DNS or email validation, cross-region support, and private certificate issuance.

No—this package is end-of-support. AWS CDK v1 reached end-of-support on 2023-06-01 and this library is no longer being updated. Users should migrate to AWS CDK v2, which has a replacement package. Installing this package locks you into an unsupported framework version and exposes you to unpatched security issues in the v1 runtime.

## Install

pip install aws-cdk-aws-certificatemanager
uv add aws-cdk-aws-certificatemanager
poetry add aws-cdk-aws-certificatemanager

## Installing aws-cdk.aws-certificatemanager

Before you install: Low install friction with pure Python wheel distribution. Package is actively maintained in the AWS CDK repository, though marked as Development Status 7 (Inactive) because AWS CDK v1 reached end-of-support on 2023-06-01; users should migrate to AWS CDK v2.

License in practice: Licensed under Apache-2.0 (permissive), allowing use in commercial and open-source projects with minimal restrictions.

Quickstart:

pip install aws-cdk.aws-certificatemanager

import aws_cdk.aws_certificatemanager as acm
import aws_cdk.aws_route53 as route53

hosted_zone = route53.HostedZone(self, "HostedZone", zone_name="example.com")
cert = acm.Certificate(self, "Certificate",
    domain_name="hello.example.com",
    validation=acm.CertificateValidation.from_dns(hosted_zone)
)

Requires AWS CDK v1 environment; AWS CDK v1 is end-of-support as of 2023-06-01 and users should migrate to AWS CDK v2 instead.

Verify before relying:

- Whether AWS CDK v2 has a replacement package with equivalent functionality and whether migration path is straightforward.
- Specific account-level ACM certificate request limits and whether the 2000 default limit applies to all regions and account types.

## Package facts

- License: Apache-2.0 (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 157.0K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

aws certificate manager cdk, acm constructs infrastructure as code, ssl tls certificate provisioning, dns validated certificates aws, cloudfront certificate automation, private certificate authority cdk, certificate expiry monitoring, aws-cdk, infrastructure-as-code, end-of-life

[View on SkillFed](https://skillfed.io/packages/aws-cdk-aws-certificatemanager) · [View on PyPI](https://pypi.org/project/aws-cdk-aws-certificatemanager/)