AWS Certificate Manager
User Guide (Version 1.0)

Set Up AWS and IAM

Before you can use ACM, you must sign up for Amazon Web Services. You can optionally create an IAM user to limit the actions your users can perform.

Sign Up for AWS

If you are not already an Amazon Web Services (AWS) customer, you must sign up to be able to use ACM. Your account is automatically signed up for all available services, but you are charged for only the services that you use. Also, if you are a new AWS customer, you can get started for free. For more information, see AWS Free Tier.

To sign up for an AWS account

  1. Go to and choose Sign Up.

  2. Follow the on-screen instructions.


Part of the sign-up procedure includes receiving an automated telephone call and entering the supplied PIN on the telephone keypad. You must also supply a credit card number even if you are signing up for the free tier.

Create an IAM User

Amazon Web Services require that you provide credentials when you access them so that each service can determine whether you have permission to use its resources. The console requires your user name and password, and you can create access keys to use the command line interface or API. But because your root credentials permit unlimited access, we don't recommend that you use them with AWS. Instead, we recommend that you use AWS Identity and Access Management (IAM) to create users with more limited permissions. That is, create an IAM user and add this user to an IAM group that has a specific set of permissions. You can then access AWS using a special URL and the user's credentials.

For example, to create a group for administrator's and add users to this group, see Creating an Administrator's Group in the AWS Identity and Access Management User Guide. The user can then sign into the account with a special URL. For more information, see How Users Sign In to Your Account.