带有 Elastic Beanstalk 的 AWS 证书管理器（ACM 证书）

Question

I have tried the following solutions but no one of them solved my problem:

1. Using AWS Certificate Manager (ACM Certificate) with Elastic Beanstalk
   

2. Set load balancer listener ssl certificate - can not give a link because I don't have 10 reputation
   

3. Configuring Your Elastic Beanstalk Environment's Load Balancer to Terminate HTTPS - can not give a link because I don't have 10 reputation

I have issued SSL Certificate in the ACM and I have configured it to work correctly for my cloundfront. But when I try to add the same certificate to my loadbalancer I get: "Updating load balancer named: ... failed Reason: Server Certificate not found for the key: arn:aws:acm:us-east-1:..."

I have also tried to add the SSL Certificate manually to the load balancer but there I'm not able to click on "Choose an existing certificate from AWS Identity and Access Management (IAM)"

Answer 1

1. Download the certificate from ACM.
   1. Via AWS API
   2. Via CLI
   3. Reccommended uploading your own cert to IAM .
      • ACM is only available in Virgina, which beta-tests many AWS Services. For this reason, Virgina often has numerous performance and stability issues.
2. Add the Cert to IAM
   1. Get the AWS CLI Installed and set-up.
   2. Add the cert to IAM via the CLI.
3. Add it to your EB Load Balancer
   1. Elastic Beanstalk > Application > Environment
   2. Configuration > Load Balancing > config (gear-icon)
   3. Set the SSL-Cert
   4. Apply.
   5. Make sure your public domain is pointed to your environment-domain
      • yourdomain CNAME environment-name.elasticbeanstalk.com

Answer 2

Ok I have found the solution to my problem. The Amazon Certificate Manager (ACM) is available only for USA East N.Virginia region but my elastic beanstalk was in USA West Oregon and that's why I was not able to see my SSL Certificate from the ACM in the loadbalancer. When I created a new elastic beanstalk in the same region as the Amazon Certificate Manager (N.Virginia) which created a load balancer in the N.Virginia too then I was able to create HTTPS Listener for the load balancer and to assign the SSL Certificate to it.