anchor.diff:  
   image:https://github.com/killbill/killbill-docs/raw/v3/userguide/assets/aws/ELB-check-listeners.png[align=center]
   
  -== Create a Certificate
  +== Enabling HTTPS
   
   We recommend for security that you choose the HTTPS protocol to access KAUI. This protocol uses SSL/TLS encryption and authentication to verify and protect all communication with the KAUI server. To use this protocol you must create or provide an X.509 certificate. This section describes how to create a certificate using the *Amazon Certificate Manager (ACM).*
   
  -==== 1. Request a Certificate
  +=== 1. Request a Certificate
   
   When you click on *Request a new Certificate from ACM*, as described above, you will be taken to the main page of the ACM. Initially this will probably show that you have no certificates. Click *Request a Certificate*.
   
  
positive.code: = Multitier Option
  
  
  There are at least three different ways to setup a working Kill Bill system on AWS. Two options are based on a single *Amazon Machine Image (AMI)* containing the complete Kill Bill stack, that is both the Kill Bill server and the administrative UI (KAUI). These options are *single tier* and *multitier*. The https://docs.killbill.io/latest//aws-singletier.html[*single tier* option] is designed to deploy a limited version of Kill Bill quickly for trial and experimentation. For production deployments, we offer the multitier option. A third alternative available for deploying a production system is https://docs.killbill.io/latest//aws-cf.html[CloudFormation templates]. The multi-tier option requires more setup than CloudFormation, but provides more control over the deployment.
  
  == Overview
  
  
negative.code: 
  In addition, AWS places all resources within a *Virtual Private Cloud (VPC)*. A default VPC will be created and used automatically in the following steps. However, if you have access to other VPCs, you will need to ensure that all Kill Bill resources are deployed in the same one.
  
  === Setup the Database Manager
  
  Once you are logged in, the first step is to setup the RDS instance. This process begins with the RDS dashboard, which should be available from the Services menu. When the dashboard appears, select *Databases* from the left menu, and click the red button at the top right that reads *Create Database*:
  
  