Stack Overflow
Stack Overflow

Questions tagged [aws-certificate-manager]

Certificate Manage is an offering by Amazon Web Services. It lets you easily provision, manage, and deploy Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services.

From the AWS product page:

AWS Certificate Manager is a service that lets you easily provision, manage, and deploy Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services. SSL/TLS certificates are used to secure network communications and establish the identity of websites over the Internet. AWS Certificate Manager removes the time-consuming manual process of purchasing, uploading, and renewing SSL/TLS certificates.

With AWS Certificate Manager, you can quickly request a certificate, deploy it on AWS resources such as Elastic Load Balancers or Amazon CloudFront distributions, and let AWS Certificate Manager handle certificate renewals. SSL/TLS certificates provisioned through AWS Certificate Manager are free. You pay only for the AWS resources you create to run your application.

235 questions
4
votes
2 answers

https raises ERR_SSL_PROTOCOL_ERROR for AWS EC2 Ubuntu instance

I set up EC2 Ubuntu instance, assigned an elastic IP, got example.com (domain) to the ec2 instance via Route53. Added an SSL certificate using ACM (certificate manager) which says 'issued'. However, https://example.com raises ERR_SSL_PROTOCL_ERROR.…
elle
  • 103
  • 1
  • 1
  • 8
4
votes
3 answers

AWS Certificate Request Validation Timeout

I'm trying to request a certificate using AWS certificate manager. I'm using route53 for DNS. I go through all of the steps, and use the "create record in Route53" to create the CNAME record automatically. I have double checked the CNAME record in…
Max Paymar
  • 588
  • 1
  • 7
  • 23
4
votes
1 answer

Cloudfront with EC2 instance

I was able to get Cloudfront working with an S3 instance, but I'm stuck with EC2 (I'm new to AWS). My Go server is accessible via elastic IP on port 443. When creating the Cloudfront distribution, I used my EC2's public DNS (IPv4) as the Origin,…
Greg Miller
  • 1,064
  • 13
  • 22
4
votes
2 answers

Import SSL AWS Certificate Manager - Cannot Import more than one certificate

I have a EV certificate for multiple subdomains for my website. The list of domains allowed are: cdn.subdomain.mydomain.com subdomain-staging.mydomain.com subdomain.mydomain.com I want to use a Cloudfront CDN with a custom CNAME as…
Amit Badheka
  • 2,677
  • 4
  • 19
  • 29
4
votes
2 answers

AWS IOT Just-in-Time Registration of Certificate in Android

I am integrating the JITR by follwing this article. https://aws.amazon.com/blogs/iot/just-in-time-registration-of-device-certificates-on-aws-iot/ I am done with all these steps and able to authenticate the certificate through command-line…
Hassan Siddique
  • 1,590
  • 14
  • 27
4
votes
1 answer

How do I combine AWS API Gateway and Application Load Balancer for HTTPS outside of us-east-1?

I am attempting to route traffic through the AWS API Gateway to my ECS containers running in a private subnet via an Application Load Balancer running in a public subnet. Using plain old HTTP everything works perfectly fine, but now I want to add…
Mark
  • 1,884
  • 2
  • 25
  • 36
3
votes
1 answer

CloudFormation stack hosted zone deletion with certificate DNS verification

I have a simple AWS CloudFormation template for creating a hosted zone for example.com along with an SSL/TLS certificate for that domain. It looks something like this: … Resources: HostedZone: Type: AWS::Route53::HostedZone Properties: …
Garret Wilson
  • 18,219
  • 30
  • 144
  • 272
3
votes
1 answer

Can I use VPC Link to NLB with ACM imported private certificate?

I've successfully got the api-gw taking to NLB (via VPC Link) then on to ALB then onto my ECS cluster running my apis. To enable SSL between api-gw and ALB using private certs I've used the insecureSkipVerification tlsconfig. The private certs were…
Skynet5
  • 63
  • 7
3
votes
1 answer

My domain is pending validation in AWS Certificate Manager

Configured *.mydomain.com using AWS Certificate Manager and is shown in Pending Validation for more than a day, even though CNAME records was published to AWS Route53 under the domain name. Everything seems appropriate but its not clear, why the…
Rpj
  • 5,348
  • 16
  • 62
  • 122
3
votes
1 answer

Terraform nested for_each aws_acm_certificate domain_validation_options

I am using Terraform v0.13.5. If I create a single AWS certificate resource for a domain registered in AWS, I can also successfully create a Route53 DNS validation record using: resource "aws_acm_certificate" "api" { domain_name =…
Ayub Malik
  • 2,488
  • 6
  • 27
  • 42
3
votes
1 answer

Amazon Certificate Manager: My Shortest Possible Domain Name Is Too Long

I'm trying to request a certificate for my.super.long.delegated.domain.com through the AWS console. I have control over long.delegated.domain.com but not over domain.com - it's someone else's and they've delegated long.delegated.domain.com to me. I…
MyStackRunnethOver
  • 4,872
  • 2
  • 28
  • 42
3
votes
1 answer

Using AWS CDK and RDS (Aurora), where can I change the Certificate authority?

I am setting up a database cluster (Aurora MySQL 5.7) using the DatabaseCluster Construct from @aws-cdk/aws-rds. My question, where in the setup can I change the Certificate authority? I want to programmatically setup the database to use rds-ca-2019…
wassgren
  • 18,651
  • 6
  • 63
  • 77
3
votes
2 answers

AWS Cert Mgr - How to create root CA certificate?

In the below option from AWS Certificate manager, I have an option to create subordinate CA but not root CA, Goal is to first create root CA certificate and then create sub-ordinate CA that is signed(issued) by root CA's private key. Documentation…
overexchange
  • 15,768
  • 30
  • 152
  • 347
3
votes
2 answers

Using CloudFront with externally hosted DNS, pointing to EC2 instance

I'm trying to set up cloudfront with my ec2 instance. The domain is at dreamhost, and I've added a CNAME record pointing to the cloudfront url. I'm using Lets Encrypt on my EC2 instance. If I use my elastic IP and set that to an A record on…
hyphen
  • 2,368
  • 5
  • 28
  • 59
3
votes
3 answers

How to validate domain with AWS certificate manager

I own a domain that I purchased through GoDaddy. I am trying to get a certificate for this domain through AWS using Certificate Manager. If it's relevant, the purpose of obtaining a certificate is to be able to host a package repository on S3, using…
Neil
  • 3,020
  • 4
  • 25
  • 48
1 2
3
…
15 16