You can now provision SSL/TLS certificates and associate them with CloudFront distributions within minutes. Simply provision a certificate using the original AWS Certificate Manager (ACM) and deploy it to your CloudFront distribution with a couple of clicks,and let ACM manage certificate renewals for you. ACM allows you to provision, deploy, and manage the certificate with no additional charges.
Source: amazon.com