简体繁体 English

ACM 在另一个账户中为 Cloud front 生成证书

[英]Certificate generation by ACM for Cloud front in another account

原文 2022-06-27 15:05:27 6 2 amazon-web-services/ amazon-cloudfront/ aws-certificate-manager

I have a question related to Cloud Front.我有一个与 Cloud Front 相关的问题。 If I have CF enabled with s3 origin in Account A , and then I create a Route 53 DNS records in Account B and point to the CF.如果我在Account A中使用 s3 origin 启用了 CF，然后我在Account B中创建一个 Route 53 DNS 记录并指向 CF。 I will need to add alternate domain name in CF which in Account A and a certificate as well.我需要在Account A中的 CF 和证书中添加alternate domain name 。 Will ACM generate a certificate in the Account A when DNS entry hello.example.com is in another account ?当 DNS 条目hello.example.com在另一个帐户中时，ACM 会在Account A中生成证书吗？

2 个解决方案

Yes ACM will be happy to generate any certificate you ask it to, but to verify the certificate to complete the creation process you will have to create a DNS entry in whatever DNS service you are using.是的，ACM 很乐意生成您要求的任何证书，但要验证证书以完成创建过程，您必须在您使用的任何 DNS 服务中创建一个 DNS 条目。 You don't even need to be using Amazon's Route53 DNS service, you can use ACM with any DNS service.您甚至不需要使用 Amazon 的 Route53 DNS 服务，您可以将 ACM 与任何 DNS 服务一起使用。

ou can do the following steps Create ACM in us-east-1 region of Account A. Once step 1 is done, you will copy the CNAME record of that ACM and go to Account B to create the DNS record for that CNAME values and use DNS validation.您可以执行以下步骤在账户 A 的 us-east-1 区域创建 ACM。完成第 1 步后，您将复制该 ACM 的 CNAME 记录并转到账户 B 为该 CNAME 值创建 DNS 记录并使用DNS 验证。 Please keep in mind, eg hello.example.com is your public domain and hosted in Route53.请记住，例如 hello.example.com 是您的公共域并托管在 Route53 中。 Back to account A and wait a few seconds, then you will see the status of ACM is issued and you can attach that ACM to your CF in Account A.返回账户 A 并等待几秒钟，然后您将看到 ACM 的状态已发出，您可以将该 ACM 附加到账户 A 中的 CF。