Over a million developers have joined DZone.

Get a Certificate From AWS Certificate Manager

Follow along with a step-by-step guide to securing your application in AWS with HTTPS.

· Cloud Zone

Build fast, scale big with MongoDB Atlas, a hosted service for the leading NoSQL database on AWS. Try it now! Brought to you in partnership with MongoDB.

Recently, AWS made the 'Certificate Manager' service available in the European region. With this service, you will be able to use SSL certificate (for free) with your applications hosted on AWS. The big advantage compared to the solution I described here is that this way I don’t have to put the certificate in my source code or have to copy it to my application. I want my Elastic Beanstalk application only to be available via HTTPS. To get this in place, I need to take the following steps:

  • Assign a (sub)domain to your application.
  • Obtain a certificate from the AWS Certificate Manager.
  • Configure AWS Beanstalk application to use SSL.

In this post, I show how I obtained an SSL certificate in the AWS Certificate Manager for the subdomain I registered in Route53 as described in my previous post. The main issue in this step of the process is that when I use the Management Console to get a certificate for my subdomain a verification mail is sent to ‘admin@test.palmapps.nl’ instead of to ‘admin@palmapps.nl’. Because my top level domain is registered outside AWS it wasn’t possible for me to get these mails in my inbox. But there is a workaround for this: Just make use of the AWS CLI as stated in the ‘troubleshoot‘ documentation. In that case, you can enter the top-level domain to be used for the verification mail. The command I used to get an SSL certificate for the subdomain ‘test.palmapps.nl’ is:

aws acm request-certificate --domain-name test.palmapps.nl --domain-validation-options DomainName=test.palmapps.nl,ValidationDomain=palmapps.nl


After performing this command, an email is received to confirm the request for the certificate:

Image title


When you click the link in the mail, you get to a webpage where you can approve the request for the certificate:

Image title


That’s it! You now have an SSL certificate registered at AWS. When I now have a look at the Certificate Manager in the Management Console, I see the certificate for test.palmapps.nl:

Image title


Now that I have obtained a certificate let me show you in the next post how to use it.

Now it's easier than ever to get started with MongoDB, the database that allows startups and enterprises alike to rapidly build planet-scale apps. Introducing MongoDB Atlas, the official hosted service for the database on AWS. Try it now! Brought to you in partnership with MongoDB.

Topics:
cli ,certificate ,manager ,ssl ,beanstalk ,management console ,aws

Published at DZone with permission of Pascal Alma, DZone MVB. See the original article here.

Opinions expressed by DZone contributors are their own.

The best of DZone straight to your inbox.

SEE AN EXAMPLE
Please provide a valid email address.

Thanks for subscribing!

Awesome! Check your inbox to verify your email so you can start receiving the latest in tech news and resources.
Subscribe

{{ parent.title || parent.header.title}}

{{ parent.tldr }}

{{ parent.urlSource.name }}