- Public, not imported certificates *can be auto-renewed* regardless of the domain being registered with AWS or not - Auto-renew is not available for public imported certs or certs associated with private route53 zones - Private certificates *can be exported* while public certificates *can not* - CloudFront and Api Gateway (edge optimized) can use ACM certf. *but the certs have to be provisioned in us-east-1* - ALB can use ACM cert but both the ALB and cert have to be in the same region

Important remarks

Public, not imported certificates can be auto-renewed regardless of the domain being registered with AWS or not
Auto-renew is not available for public imported certs or certs associated with private route53 zones
Private certificates can be exported while public certificates can not
CloudFront and Api Gateway (edge optimized) can use ACM certf. but the certs have to be provisioned in us-east-1
ALB can use ACM cert but both the ALB and cert have to be in the same region