A company is building an online platform on a popular cloud provider and must ensure end-to-end encryption of its web traffic. Which service should be deployed to manage the lifecycle of SSL/TLS certificates for secure HTTPS connections, including automatic renewals, without significant manual intervention?
The cloud provider's certificate management service
Manually generated self-signed certificates stored on a secure object storage service
An identity and user authentication service with external federation capabilities
A key management service that specializes in creating and controlling encryption keys