AWS Certified Solutions Architect - Professional (#545)

You're trying to delete an SSL certificate from the IAM certificate store, and you're getting the message "Certificate: <certificate-id> is being used by CloudFront." Which of the following statements is probably the reason why you are getting this error?

Before you can delete an SSL certificate you need to set up https on your server.
Before you can delete an SSL certificate, you need to set up the appropriate access level in IAM
Before you can delete an SSL certificate, you need to either rotate SSL certificates or revert from using a custom SSL certificate to using the default CloudFront certificate.
You can't delete SSL certificates. You need to request it from AWS.