Track certificate renewal readiness — ACM and Certificate renewal

Your goal

Inspect certificate readiness and record who should track its renewal.

Why this matters

Certificates need an owner who checks validation and renewal readiness. You will inspect those fields and record a RenewalOwner label. The lab does not claim that a pending certificate has renewed.

Words you will use

A certificate supports an encrypted connection and identifies a domain. Validation proves domain control. Renewal replaces an expiring certificate with a fresh one.

How to proceed

Start a fresh emulator, read each numbered step, and enter the practice settings shown. Run the action, inspect its API receipt, then continue. Finish lab checks the emulator state again before saving your progress.

1. Request a DNS-validated certificate

Create a certificate request for a reserved practice domain. A certificate must meet validation and eligibility requirements before managed renewal can help. This lab does not validate a real domain.

2. Inspect readiness and assign an owner

Read the certificate status and renewal fields, then save a RenewalOwner tag with your invented team label. The label records responsibility; it does not make a pending certificate eligible for renewal.

Practice label: This label is saved in the emulator. Use 1–80 characters. Suggested practice value: moonbase.

3. Check the owner and current status

Describe the certificate and read its tags. Verify the owner you saved and inspect the actual status. This lab does not advance time, validate DNS, or claim a renewal occurred.

Practice, then check your understanding

Perform the actions yourself and inspect the returned state. Errors keep your settings so you can retry. Starting another lab clears the previous live environment. Earned XP is kept, and signed-in achievements sync to your account. Replay does not award duplicate XP.

Read the official AWS documentation for service behavior and production details.