Get a Certificate from AWS Certificate Manager

aws_certificate_managerRecently AWS made the ‘Certificate Manager‘ service available in the Europe region. With this service you will be able to use SSL certificate (for free) with your applications hosted on AWS. The big advantage compared to the solution I described here is that this way I don’t have to put the certificate in my source code or have to copy it to my application. As I described in my previous post I want my Elastic Beanstalk application only to be available via HTTPS. To get this in place I need to take the following steps:

  • Assign a (sub)domain to your application
  • Obtain a certificate from the AWS Certificate Manager
  • Configure AWS Beanstalk application to use SSL

In this post I show how I obtained a SSL certificate in the AWS Certificate Manager for the subdomain I registered in Route53 as described in my previous post. The main issue in this step of the process is that when I use the Management Console to get a certificate for my subdomain a verification mail is sent to ‘’ instead of to ‘’. Since my top level domain is registered outside AWS it wasn’t possible for me to get these mails in my inbox. But there is a workaround for this: just make use of the AWS CLI as stated in the ‘troubleshoot‘ documentation. In that case you can enter the top-level domain to be used for the verification mail. The command I used to get a SSL certificate for the subdomain ‘’ is:

aws acm request-certificate --domain-name --domain-validation-options,

After performing this command an email is received to confirm the request for the certificate:
Screenshot at Aug 11 14-12-18
When you click the link in the mail you get to a webpage where you can approve the request for the certificate:
Screenshot at Aug 11 14-12-52
That’s it! You now have a SSL certificate registered at AWS. When I now have a look at the Certificate Manager in the Management Console I see the certificate for
Screenshot at Aug 11 14-33-53
Now that I have obtained a certificate let me show you in the next post how to use it.

About Pascal Alma

Pascal is a senior software developer and architect. Pascal has been designing and building applications since 2001. He is particularly interested in Open Source toolstack (Mule, Spring Framework, JBoss) and technologies like Web Services, SOA and Cloud technologies. Lately he is having great fun by building iOS apps with Swift. Specialties: JEE AWS XML/XSD/XSLT Web Services/SOA Mule ESB/ WSO2 ESB Maven Cloud Technology Swift/ iOS
This entry was posted in AWS, Security and tagged , , . Bookmark the permalink.

One Response to Get a Certificate from AWS Certificate Manager

  1. Pingback: Configure AWS Elastic Beanstalk application to use SSL | The Pragmatic Integrator

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s