diff --git a/README.md b/README.md
index eaa90a6..c733241 100644
--- a/README.md
+++ b/README.md
@@ -57,6 +57,7 @@ Table of Contents
 | [Device Farm](#device-farm) | [📗](#device-farm-basics) |  |  |
 | [IoT](#iot) | [📗](#iot-basics) | [📘](#iot-tips) | [📙](#iot-gotchas-and-limitations) |
 | [SES](#ses) | [📗](#ses-basics) | [📘](#ses-tips) | [📙](#ses-gotchas-and-limitations) |
+| [Certificate Manager](#certificate-manager) | [📗](#certificate-manager-basics) | | |
 
 **Special Topics**
 
@@ -1501,6 +1502,19 @@ SES
 
 -       🔸**Internet Access:** SES SMTP endpoints are on the Internet and will not be accessible from a location without Internet access (e.g. a private subnet without NAT gateway route in the routing table). In such a case, set up an SMTP relay instance in a subnet with Internet access and configure your application to send emails to this SMTP relay instance rather than SES. The relay should have a [forwarding rule to send all emails to SES](http://docs.aws.amazon.com/ses/latest/DeveloperGuide/send-email-smtp-existing-server.html)). ❗If you are using a proxy instead of a NAT, confirm that your proxy service supports SMTP.
 
+Certificate Manager
+-------------------
+
+### Certificate Manager Basics
+-	📒 [Homepage](https://aws.amazon.com/certificate-manager/) ∙ [User guide](http://docs.aws.amazon.com/acm/latest/userguide/acm-overview.html) ∙ [FAQ](https://aws.amazon.com/certificate-manager/faqs/) ∙ [Pricing](https://aws.amazon.com/certificate-manager/pricing/)
+- Use the **Certificate Manager** to manage SSL/TLS certificates in other AWS services.
+- Supports importing existing certificates as well as issuing new ones.
+
+### Certificate Manager Alternatives and Lock-in
+- Certificates issued by the **Certificate Manager** can't be used outside of the services that support it. Imported certificates, however, can still be used elsewhere.
+
+🚧 [*Please help expand this incomplete section.*](CONTRIBUTING.md)
+
 High Availability
 -----------------