Why does my ACM cert give associated resources in another account?

Question

I have an ACM certificate that is no longer needed.  The Route 53 zone it linked to is no longer available so it can't auto-renew.  I loaded it up to delete, but it has associated resources.  The resources are load balancers in a different AWS account, one not owned by my company.
How does this happen, and how do I disassociate it?

Accepted Answer

Deploying a Regional API endpoint creates an Application Load Balancer by API Gateway. The Application Load Balancer is owned by API Gateway service, not your account. The ACM certificate provided to deploy API Gateway is associated with the Application Load Balancer.

Similarly, defining a custom endpoint for your domain in Amazon ElasticSearch Service (Amazon ES) creates an Application Load Balancer. The Application Load Balancer is owned by the ElasticSearch service, not by your account. The ACM certificate provided with creating the custom endpoint is associated with the Application Load Balancer.

To remove the association of the ACM certificate with the Application Load Balancer given any of these use cases, please follow the guidelines outlined in our blogpost (https://aws.amazon.com/premiumsupport/knowledge-center/acm-certificate-resources/) for the respective service.

Why does my ACM cert give associated resources in another account?

Relevant content