Certificate generation by ACM for Cloud front in another account

Question

I have a question related to Cloud Front. If I have CF enabled with s3 origin in Account A, and then I create a Route 53 DNS records in Account B and point to the CF. I will need to add alternate domain name in CF which in Account A and a certificate as well. Will ACM generate a certificate in the Account A when DNS entry hello.example.com is in another account ?

Answer 1

Yes ACM will be happy to generate any certificate you ask it to, but to verify the certificate to complete the creation process you will have to create a DNS entry in whatever DNS service you are using. You don't even need to be using Amazon's Route53 DNS service, you can use ACM with any DNS service.