Put a secure connection on your site — Certificate Manager and HTTPS

Your goal

Request a practice TLS certificate and label its purpose.

Why this matters

A TLS certificate request has a status, validation details, and an identity your team must track. You will request and label a practice certificate. A pending request is not a working HTTPS connection.

Words you will use

HTTPS protects traffic between browser and server. A TLS certificate helps prove the server’s identity. ACM manages certificates for supported AWS services.

How to proceed

Start a fresh emulator, read each numbered step, and enter the practice settings shown. Run the action, inspect its API receipt, then continue. Finish lab checks the emulator state again before saving your progress.

1. Request a certificate

Request a DNS-validated certificate for a reserved example.invalid name. The emulator records the request. It does not issue a publicly trusted certificate for a real website.

2. Label the certificate

Add a Purpose tag so you can identify why the certificate exists. A tag is a useful label; it does not complete domain ownership validation.

Practice label: This label is saved in the emulator. Use 1–80 characters. Suggested practice value: moonbase.

3. Inspect its details and label

Describe the certificate to see its status and validation details, then read its tags. The lab checks the saved label without claiming that a pending certificate is ready for HTTPS.

Practice, then check your understanding

Perform the actions yourself and inspect the returned state. Errors keep your settings so you can retry. Starting another lab clears the previous live environment. Earned XP is kept, and signed-in achievements sync to your account. Replay does not award duplicate XP.

Read the official AWS documentation for service behavior and production details.