适用于AWS内部负载均衡器的SSL证书

Question

We have an internal facing application load balancer in AWS VPC. This is being accessed by a web app running in a public subnet. The web app is behind a custom domain url and it uses SSL certificate for security.Since, the API load balancer is not applied with SSL, communication from web app to API LB is failing.

Is it possible to get a SSL certificate for an internal facing load balancer in AWS?

Answer 1

Yes this is entirely possible using the AWS ACM service, there are two options, you can use Amazon's public service to generate certs but I assume that is not what you want to do here. So you can alternatively create a Private CA through this service and distribute your certificates from there which can then be placed on Loadbalancers etc. You will most likely want to look at these pages:

https://docs.aws.amazon.com/acm/latest/userguide/acm-overview.html https://aws.amazon.com/certificate-manager/

Have a read first before diving right in but it's a pretty nifty feature for this sort of thing, once the CA is setup then creating certs is so fast and instantly attachable to resources.