Requesting and managing TLS certificates from the Amazon Certificate Manager (ACM) is accomplished by using the AWS web console, SDK, or CLI. Amazon has extensive documentation about ACM on their website.

While ACM itself supports both DNS- and email-based certificate validation options, Cornell will not respond to emailed requests from ACM to validate certificates. Cornell AWS customers should use DNS-based validation for cornell.edu and other domains serviced by the Cornell DNS database. DNS certificate validation requires the existence of specific DNS records in the Cornell DNS database to prove to ACM that you own the domain for which you are requesting a certificate. With appropriate approval you can manage DNS records in the Cornell DNS database, or you can request that records be created on your behalf. See DNS.