Get a Certificate from AWS Certificate Manager

aws_certificate_managerRecently AWS made the ‘Certificate Manager‘ service available in the Europe region. With this service you will be able to use SSL certificate (for free) with your applications hosted on AWS. The big advantage compared to the solution I described here is that this way I don’t have to put the certificate in my source code or have to copy it to my application. As I described in my previous post I want my Elastic Beanstalk application only to be available via HTTPS. To get this in place I need to take the following steps:

  • Assign a (sub)domain to your application
  • Obtain a certificate from the AWS Certificate Manager
  • Configure AWS Beanstalk application to use SSL

In this post I show how I obtained a SSL certificate in the AWS Certificate Manager for the subdomain I registered in Route53 as described in my previous post. The main issue in this step of the process is that when I use the Management Console to get a certificate for my subdomain a verification mail is sent to ‘admin@test.palmapps.nl’ instead of to ‘admin@palmapps.nl’. Since my top level domain is registered outside AWS it wasn’t possible for me to get these mails in my inbox. But there is a workaround for this: just make use of the AWS CLI as stated in the ‘troubleshoot‘ documentation. In that case you can enter the top-level domain to be used for the verification mail. The command I used to get a SSL certificate for the subdomain ‘test.palmapps.nl’ is:

aws acm request-certificate --domain-name test.palmapps.nl --domain-validation-options DomainName=test.palmapps.nl,ValidationDomain=palmapps.nl

After performing this command an email is received to confirm the request for the certificate:
Screenshot at Aug 11 14-12-18
When you click the link in the mail you get to a webpage where you can approve the request for the certificate:
Screenshot at Aug 11 14-12-52
That’s it! You now have a SSL certificate registered at AWS. When I now have a look at the Certificate Manager in the Management Console I see the certificate for test.palmapps.nl:
Screenshot at Aug 11 14-33-53
Now that I have obtained a certificate let me show you in the next post how to use it.

About Pascal Alma

Pascal is a senior IT consultant and has been working in IT since 1997. He is monitoring the latest development in new technologies (Mobile, Cloud, Big Data) closely and particularly interested in Java open source tool stacks, cloud related technologies like AWS and mobile development like building iOS apps with Swift. Specialties: Java/JEE/Spring Amazon AWS API/REST Big Data Continuous Delivery Swift/iOS
This entry was posted in AWS, Security and tagged , , . Bookmark the permalink.

One Response to Get a Certificate from AWS Certificate Manager

  1. Pingback: Configure AWS Elastic Beanstalk application to use SSL | The Pragmatic Integrator

Comments are closed.