Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 307 discussion

Regional Certificates: ACM certificates are regional resources. They cannot be shared across different Regions. Creating a certificate in each Region ensures proper certificate management and association with the ALBs. CloudFormation Integration: CloudFormation allows you to define resources and their configurations for individual Regions. Creating certificates within the template for each Region aligns well with this approach.

ACM is a regional service

Given the requirements and cost-effectiveness, I recommend Option D—create a certificate in ACM in the us-east-1 Region and update the CloudFormation template to deploy the certificate to each ALB. This way, you maintain consistency while minimizing certificate management overhead.

C is the correct answer.

https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html

Certificates in ACM are regional resources. To use a certificate with Elastic Load Balancing for the same fully qualified domain name (FQDN) or set of FQDNs in more than one AWS region, you must request or import a certificate for each region.

The correct solution is to create a certificate in each Region and to assign it to each ALB.