AWS S3，CloudFront和SSL

Question

I have tried setting up a static hosting solution for our web platform by using AWS S3 and CloudFront. It is required to use https, and it needs to be accessed via a custom subdomain.

This is my S3 bucket:

These are the settings for the CloudFront:

The certificate settings look ok to me:

And finally my DNS record is like this: CNAME: "static" -> "d1fd407fp9coo4.cloudfront.net."

edit: using my default domain provider for DNS, not Route 53.

The aim is to have the resource available at static.dmaglobal.com/logo-frontpage.png via https. It loads fine without ( http://static.dmaglobal.com/logo-frontpage.png ), but the https-version ( https://static.dmaglobal.com/logo-frontpage.png ) gives an SSL-error stating the current certificate is for *.s3.eu-west-2.amazonaws.com instead of *.dmaglobal.com. I do not understand where this mismatch comes from, as it seems like the current certificate is correctly set up for our custom domain.

Anyone able to give some pointers on how to proceed from here with this issue?

Answer 1

As you have noticed your DNS record resolves to S3 still.

Instead of CNAME you should create an ALIAS record to Cloudfront distribution. In static record pick A type record, check Yes for Alias and pick the Cloudfront distribution on the dropdown.

The reason for this: ALIAS records are free of charge and they resolve faster.

Answer 2

To answer my own question: In the end, it was the proper CNAME value that had not propagated properly yet (as it was initially pointing to S3 before I was aware that CloudFront was required for SSL). As soon as it was, the settings in the OP worked perfectly.