Security & identity

AWS Certificate Manager (ACM)

Timenot billed
Bytesnot billed
Callsbilled

In one line

Certificates you terminate on AWS are free. Exporting one, or issuing over ACME, is not.

What gets missed

The free tier of ACM covers non-exportable public certs bound to integrated AWS services. Exportable and ACME certs bill per domain name at issuance and at every renewal, wildcards far higher than plain names.

Find it on your bill

Filter Cost Explorer or your Cost and Usage Report by these usage types. A usage type with no region prefix means us-east-1.

IssueExportablePublicCertificateDomain
IssueACMEPublicCertificateDomain
ExportPublicCertificate

Bills the same way

These services turn exactly the same meters, so what you learn here transfers.