Tuesday, September 13, 2022

Setting up secure custom domain in CloudFront



 ->Obtain an SSL Certificate within Certificate Manager. 

Please note that this allows us to serve your content over https and is a service provided by Amazon for free, and they’ll also take care of its renewal.
Also within the Certificate Manager service, make sure you change your region is same the certificate manager created from.

-->List all your Alternative Domain Names in the CloudFront distribution settings.

-> Reference the SSL Certificate you created. Check the Custom SSL Certificate (example.com) option and pick your SSL Certificate from the list.
note that, our Alternate Domain Names must match those you specified in the SSL Certificate provisioning request — so if you don’t see your certificate in the list, 
that is probably the reason.

-> In your domain hosted zone in Route 53, select to Create Record Set.
crating as an A record for IPv4 and we’ll select the Alias option as CloudFront distribution.

Point to be noted, https is being handled at coudfront level, it can pass it on to ALB to handle https again which subsequently http while hitting backend/ downstream services. 
That is all we need to access mycustom-domain.com  on https via cloudfront.

No comments:

Post a Comment