All geek questions in one place

AWS: SSL certificate custom parameter is disabled in CloudFront, but I created an SSL certificate using AWS Certificate Manager

I am creating an SSL certificate for my amazon S3 static website. I created an SSL certificate using the certificate manager for my domain, and its status is "Issued". I am creating CloudFront Distribution, but the Custom SSL Certificate option is disabled.

It may take some time (a day or more) before I can see my own SSL certificate? Or am I doing something wrong?

+5
source share
1 answer

Certificates to be used with application load balancer (ELB / 2.0) must be created in ACM in the same area as balancing.

Certificates to be used with CloudFront must always be created in us-east-1.

To use an ACM certificate with Amazon CloudFront, you must request or import a certificate in the US region (Northern Virginia). The ACM certificates in this region associated with the CloudFront distribution apply to all geographic locations configured for this distribution.

- http://docs.aws.amazon.com/acm/latest/userguide/acm-regions.html

The reason for this is that CloudFront does not follow the regional edge model in AWS. CloudFront edge regions are located all over the world, but are configured and managed from us - east-1 - think of it as a CloudFront domain. As soon as the distribution reaches Deployed state, it does not depend on the us-east-1 operating system, but during preparation everything comes from this region, so there is only an ACM area that CloudFront can access.

+7
source

Source: https://habr.com/ru/post/1266225/

More articles:


All Articles