Clarification on Dynamically Provisioning SSL for Multiple Client Domains Using ACM and CloudFront

[fredrickreuben]

I'm currently working on a project where I need to dynamically provision SSL certificates for around 1,000 clients, each with their own domains. I'm using AWS Certificate Manager (ACM) for SSL certificates. I have a few questions:

1. Managing SSL for Multiple Domains:

   • Is it appropriate to request and manage SSL certificates for 1,000+ domains using ACM?
   • Are there any best practices or limitations I should be aware of when dealing with a large number of domains?

2. Using CloudFront for Each Domain:

   • Is it recommended to create a separate CloudFront distribution for each client's domain?
   • If not, what would be a scalable and efficient way to handle SSL for multiple domains using CloudFront, considering potential limits on distributions and pricing?

I'm looking for guidance on the best approach to efficiently and securely manage SSL certificates and content delivery for a large number of domains.

Thank you!