Microsoft Azure → Amazon Web Services
AWS equivalent of Key Vault certificates
The closest AWS equivalent of Key Vault certificates is AWS Certificate Manager (ACM).
About Key Vault certificates
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available |
| What it is | Creates, imports, and auto-renews X.509 certificates, self-signed or issued through integrated public CAs (DigiCert, GlobalSign), and deploys them to App Service, Application Gateway, and Front Door. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (1)
| Capability | AWS equivalent | Match |
|---|---|---|
| Managed TLS certificates | AWS Certificate Manager (ACM) | Partial match |
Keys, secrets & certificates(1)
Managed TLS certificates Partial match
AWS Certificate Manager maps to Key Vault certificates, plus free managed certificates built into App Service and Front Door.
- Issuance. ACM issues free public certificates (Amazon-issued) for integrated services. Key Vault doesn't issue public certificates itself; it orders them from integrated CAs (DigiCert or GlobalSign, billed by the CA) or stores imported ones. App Service and Front Door can issue free managed certificates for custom domains.
- Deployment. ACM certificates attach directly to ELB, CloudFront, and API Gateway. Key Vault certificates are referenced by App Service, Application Gateway, and Front Door.