1

Context:

  1. Created S3 bucket [used example.com, not www.example.com for S3 bucket name]enter image description here have permissions set as shown in screenshot. enter image description here
  2. Certificates [applied]. Please see the screenshot Cert Manager [certs applied to Route 53. Please see the screenshot enter image description here
  3. CloudFront [please see config screenshot ] Added a subdomain here enter image description here 4. Route 53 [configured, please let me know if there are screenshots that would help] Observed Results:
  4. I can navigate to the "Distribution Domain Name URL" provided in CloudFront's CDN dashboard https://Redacted-Guid.cloudfront.net/ - site resolves fine
  5. I get the following https://toolbox.googleapps.com/apps/dig/#CNAME/ response and can navigate and resolve the record returned. https://Redacted-Guid.cloudfront.net.
  6. When I navigate to https://www."example".com, I get the following certificate warnings (please see screenshots).Cert CTACert CTA2 If I accept the cert, then I get the following 403 error; please see screenshotenter image description here #3.enter image description here

Expected Results: The user can navigate to the domain name and see the site via HTTPS connection without 403 error and having to accept a cert.

Note Please bear with me if there is latency between your answer(s) and my reading them - I've been heads down in this (when the grass was supposed to have been cut by me), and if I don't cut the grass I'm going to be in a doghouse.

davos
  • 151
  • 10

1 Answers1

1

You need to register www.example.com as alternate domain in your cloudfront definition (plus a valid certificate to prove you own this domain)

MarcC
  • 413
  • 3
  • 12
  • Hi @MarcC - I'm confused, that certificate is in there - it is the only certificate in CloudFront. – davos Jul 02 '23 at 15:59
  • Check the alternate domain name section right on top of the certificate section in the cloufront distribution form – MarcC Jul 02 '23 at 16:01
  • I'm unable to add a screenshot in this interface after the question is posted, but when I navigate to CloudFront, Distributions, that distribution, I see under custom domains, alternate domains and www.n(redacted).com. Of note, I don't have a cert applied for n(redacted).com (with no www) – davos Jul 02 '23 at 16:03
  • Ok then my answer is not relevant sorry – MarcC Jul 02 '23 at 16:16
  • Oh no, thanks @MarcC for that, and my fault for not adding that screenshot in there to begin with. – davos Jul 02 '23 at 16:25