Vishesh Ghule's Blog
Day 39: What is ACM (Amazon Certificate Manager)

Day 39: What is ACM (Amazon Certificate Manager)

#90daysofdevops

Vishesh Ghule's photo
Vishesh Ghule
·

3 min read

🚀 Introduction

In previous blog we have seen that how to host webiste & routing methods in this blog we will see how to add SSL certificate to website.

We'll follow the steps provided below

  1. Create VPC

  2. Create 2 subnet

  3. Create internet gateway & attach to VPC

  4. Create route table

    • Edit subnet association

    • Select both subnet & save save changes

    • Edit route -> add route -> 0.0.0.0/0 -> internet gateway -> save changes

  5. Launch EC2 instance

    • Select VPC that we have created

    • Add security group -> http -> anywhere

    • Write this script in user data under advanced details

         #!/bin/bash
   yes | sudo apt update 
   yes | sudo apt install nginx
   echo "<h1>Server details</h1>
   <p><strong>Hostname:</strong> $(hostname)</p>
   <p><strong>IP Address: </strong>$(hostname -I | cut -d" " -f1)</p>" > /var/www/html/index.html
   sudo systemctl restart nginx

  6. Create target group -> Select instance -> create target group

  7. Create load balancer

    • Select application load balancer

    • Select both subnet

    • Create security group

    • Add inbound rule -> http & ssh (anywhere IPv4)

    • Create Security Group

  8. By domain from website like godaddy, google domain, hostinger or you can also buy domain in route53

  9. After buying domain name now go in route53 -> hosted zone (create hosted zone) -> click on your xyz.com (your domain name) & then create record -> select simple routing -> define simple record

    • Choose endpoint (Alias to application & classic load balancer) -> choose region -> choose load balancer -> Create record

  10. Generate Certificate

    • Go in AWS console & type certificate manager

    • Request certificate -> Request a public certificate -> select DNS validation -> Select RSA 2048 -> click on request

    • Click on certificate ID -> Click on Create record in route 53 -> Create record

  11. Now go to the load balancer again & click on load balancer that you have created -> Add listener HTTPS in listeners & rules

    • HTTPS

    • Forward to target group

    • Select target group

    • From ACM

    • Select a certificate -> xyz.com (your domain name) ->

  12. And there is default listener HTTP:80, click on that HTTP:80 & click on default after that click on action & click on edit (edit rule like given below)

    • HTTP

    • Redirect to URL

    • HTTPS -> 443

    • Save changes

  13. Now edit security (beside listeners & rules) there is two security group one is default and another one which we have created, click on that security group & edit inbound rule

    • Add rule

    • HTTPS (anywhere IPv4) -> Save rules

Access website using www

In Case, if you're using other domain like example xyz.com then there is again a different name so you need to request a certificate for that particular domain name as well so you need to create a new certificate & there you need to enter the root name as www.xyz.com & request a new certificate for that particular domain as well & then push those record into again to over route53 & then after that you will be able to access the URL using www.xyz.com

In the next blog, we'll see how to attach an SSL certificate using Certbot

Thanks for reading to the end; I hope you gained some knowledge.❤️🙌

Linkedln

Twitter

Github

AWSDevopsACM