AWS Certificate Manager can automatically renew most SSL/TLS certificates. For certificates that may not be configured for automatic renewal, renewing them within a timely fashion will ensure that TLS communication remains secured. For more information, see the AWS documentation.
References:
https://docs.aws.amazon.com/acm/latest/userguide/managed-renewal.html
In AWS Console -
In Terraform -