Editing Elastic Beanstalk Security Certificates

== Overview ==

Instructions on how to install security certificates for websites hosted in AWS Elastic Beanstalk environments.

== AWS Certificate Manager ==

* In the AWS management console, go to '''AWS Certificate Manager (ACM)'''
* Click '''Request a Certificate'''
** '''Certificate Type''': "Request a public certificate"
** '''Fully qualified domain name:''' ''Enter domain name''
** Click ''Add another name to this certificate'' to add any additional subdomains or wildcards to the certificate
** '''Select validation method:''' DNS validation
** Click '''Request''' button
*  The new certificate will be displayed in a list along with its associated domain name. 

== Validate the certificate’s domains ==

Each domain listed on the certificate must be validated to prove the person creating the certificate has control of the domain.

* Click on the certificate in the ACM list.
* Under '''Domains''', a “Create records in Route 53” button is displayed if the Route 53 is used to manage the domain name.
* Click that button.
* Select the domains to validate.
* Click '''Create Records'''.

It can take up to 30 minutes for the status of the domain to change from “pending validation” to “issued.”

== Apply the certificate to load balancers ==

A certificate is used to add a "listener" to the load balancer associated with an Elastic Beanstalk instance. The listener routes HTTPS requests to the EBS instance.

* Go to the '''Elastic Beanstalk management console'''.
* Select an EBS environment.
* Click '''Configuration''' from the menu on the left.
* Select '''Load Balancer''' > '''Edit'''
* Under '''Listeners''', click '''Add Listener'''
** '''Port:''' 443
** '''Protocol:''' HTTPS
** '''SSL Certificate:''' Select the certificate created in ACM
** '''SSL Policy:''' (blank)
** '''Default process:''' (default)
** Click '''Add'''

<span style="color:red;">Make sure to scroll down to the bottom of the page</span> to click '''Apply'''. I didn’t notice this at first and was wondering why the new listener was disappearing.

== Notes ==
=== See Also ===

* Legacy page: [[Installing Lets Encrypt Security Certificates In Elastic Beanstalk Environments]]

=== References ===
<references />

[[Category:AWS]][[Category:Elastic Beanstalk]][[Category:Web Development]]