What is the best way to use Amazon SSL certificate in Load balancing or Cloud Front

Question

在Cloudfront或负载均衡器中安装Amazon SSL证书哪个更好

Answer 1

It depends.

As you might already know, Cloudfront is a CDN and will deliver your content closer to end-consumers who access the content (using AWS Edge network). If you don't require that or your content needs to be delivered fast only to regional consumers (where your load balancer is in) then you don't have to use Cloudfront.

In other words, you could have SSL added at either Cloudfront or at the ALB depending on your requirement.

Answer 2

对于CloudFront，您需要在us-east-1中获得ACM证书，对于负载均衡器，它应与负载均衡器位于同一区域。