Trouble getting my simple website to use SSL within SSL and CloudFront

Question

I'm trying to install an SSL for my website hosted on an EC2, hosted in Ireland. This article below states the load balancer needs to be hosted in n. virginia for Cloud Front to work (so that I can use my custom SSL certificate). Will this work if my website is in Ireland?

I've tried several times but yet to get it working. I have the following - EC2, route53, load balancer, certificate manager, cloudfront.

AWS: Custom SSL certificate option is disabled in CloudFront, but I created a SSL certificate using AWS Certificate Manager

Many thanks,

Updates

Screenshot of my certificate

CloudFront

Chris McKinnel · Accepted Answer · 2019-06-02T23:03:11.893

3

You don't need to have your load balancer hosted in North Virginia, this is referring to using AWS Certificate Manager and CloudFront together. I.e., if you want to request an SSL certificate using the AWS Certificate Manager and attach it to your CloudFront distribution.

This is because CloudFront distributes its SSL certificates from North Virginia out to the other edge locations in its distribution network.

What you can do is:

ACM certificate created in North Virginia
CloudFront distribution created and certificate applied to it
Route 53 hosted zone with an Alias to CloudFront distribution
Load balancer in Ireland set as an origin in CloudFront distribution
EC2 instance in Ireland

Example of Alias in Route 53 pointing to CloudFront distribution:

Example of CloudFront DNS:

edited Jun 02 '19 at 23:03

answered Jun 02 '19 at 22:35

Chris McKinnel

14,694
6
64
67

Ok, just trying now. I've deleted the cloudfront distribution to start from fresh.. Just waiting for the status to finish whilst it's creating a new one – James Jun 02 '19 at 22:42
The Route 53 point in your answer, what type should it be? "txt - text" – James Jun 02 '19 at 22:44
I would suggesting using the Alias type - when you select it, it should auto-populate with your CloudFront distribution (wait until it's fully provisioned). – Chris McKinnel Jun 02 '19 at 22:45
I've added a screen shot showing what I mean regarding Route 53. – Chris McKinnel Jun 02 '19 at 22:49
Can't see the cloud front in the dropdown with a value (cloudfront distribution has deployed). The option is empty (like your screen shot) – James Jun 02 '19 at 22:52
Try just pasting in your CloudFront distributions DNS endpoint. – Chris McKinnel Jun 02 '19 at 22:53
Do you mean the ARN value to paste? (I've tried this but no luck) – James Jun 02 '19 at 22:57
No - the endpoint that you hit in a browser to hit your CloudFront distribution. – Chris McKinnel Jun 02 '19 at 23:00
I've added pictures, hope that helps – James Jun 02 '19 at 23:04
Sorry not sure, do you mean my domain name? – James Jun 02 '19 at 23:05
The domain name of the CloudFront distribution, not the domain name of your certificate. See my latest update for an example - the red highlighted box is what you need to paste into your Alias in Route 53. – Chris McKinnel Jun 02 '19 at 23:06
Let us [continue this discussion in chat](https://chat.stackoverflow.com/rooms/194347/discussion-between-chris-mckinnel-and-james). – Chris McKinnel Jun 02 '19 at 23:08

Trouble getting my simple website to use SSL within SSL and CloudFront

1 Answers1