Related: Security, TLS and SSL
Regional.

Allows you to create Certification Authority and generate/import certificates.
If generated, automatically renewed

Works with only supported services: ALB and CloudFront, but not EC2

DANGER

To use cert on ALB like in ap-southeast-2 you need certificate issued in the same region!

Exception CloudFront – it always operates with it on us-east-1