Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Way to use AWS Certificate Manager cert with API Gateway?

I need the Certificate name, Certificate body, Certificate private key and Certificate chain to use a domain name in the API Gateway.

I have the certificate for *.domainready.com in Amazon's Certificate Manager. And I'd like to use that cert info. I can't find any access to it from the dashboard interface. Is there any way to get the information regarding the cert out of AWS?

like image 642
ThomasReggi Avatar asked Jun 16 '16 20:06

ThomasReggi


1 Answers

As of March 9th 2017 certificates created in the us-east-1 region are available to be used by API Gateway.

The AWS API Gateway is not a service integrated with the AWS Certificate Manager. This limits its use to those services (CloudFront and Elastic Load Balancing) only.

To install an SSL certificate on the API Gateway, you need the public certificate, the private key, and a root CA certificate chain. The ACM itself never lets you see the private key, as this is managed entirely within the service. This is the limiting factor: you cannot export the certificate in a useable format for later importing to another SSL endpoint e.g. API Gateway.

You will need to purchase an SSL Certificate from the major providers, use a free service (StartSSL), or a self-signed certificate - if you are testing.

With any of those certificates you can configure them in the API Gateway Create Custom Domain page.

like image 135
Rodrigo Murillo Avatar answered Sep 28 '22 07:09

Rodrigo Murillo