Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Amazon CloudFront with AWS Certificate Manager
Search
Amimoto - Flexible Cloud WordPress Hosting
May 02, 2016
How-to & DIY
0
180
Amazon CloudFront with AWS Certificate Manager
# High speed content delivery using CDN.
# Automated SSL certificate management.
Amimoto - Flexible Cloud WordPress Hosting
May 02, 2016
Tweet
Share
More Decks by Amimoto - Flexible Cloud WordPress Hosting
See All by Amimoto - Flexible Cloud WordPress Hosting
[日本語] AMIMOTO-AMI Lineup
amimoto
0
140
EdgeCase - A speaker series by J2 Design
amimoto
0
260
Progress the system operation drastically with Cloud Automator — AMIMOTO side—
amimoto
0
160
[東京]Cloud_Automatorで攻めのシステム運用 AMIMOTO スタック編
amimoto
0
830
AMIMOTO Design Pattern + Server-less Architecture
amimoto
0
470
WooCommerce with Elasticsearch
amimoto
1
440
[日本語] WooCommerce with Elasticsearch
amimoto
0
210
WordPress with CloudFront + AMAZON RDS + S3
amimoto
1
650
[日本語]Amazon CloudFront with AWS Certificate Manager
amimoto
2
4.5k
Other Decks in How-to & DIY
See All in How-to & DIY
100回分は振り返りできなかったけど振り返り #iotlt vol101
n0bisuke2
0
290
バタフライ効果/butterfly_effect
florets1
0
210
スクラムチームに アウトスプリントで関わる テスターの取り組み事例
camel_404
0
150
在宅フルリモートワークを可能にするスキルと知識n連発! / how to more effective remoteworking
masaru_b_cl
0
700
#呼び込み君 に例のバイトをさせる #iotlt
n0bisuke2
0
250
400人誰もやらんので私がやってみました社内でChatGPT LINE Bot
okinakagaikotu
0
230
それっぽいポッドキャストの作り方
khirata
2
220
[AWS Expert Online for JAWS-UG] Amazon CloudWatch で できる n 個のこと
awsjcpm
0
110
担当アイドルを応援する傘を作ろう! (として失敗した話)
subroh0508
0
430
Earthquake and Kominka
ramtop
0
120
IoTスタバBotを作って店員さんと話してみた
scbc1167
0
100
Dirbtinis intelektas dizainerio gyvenime
lekevicius
0
170
Featured
See All Featured
Side Projects
sachag
451
42k
Done Done
chrislema
180
16k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
eileencodes
131
32k
Why Our Code Smells
bkeepers
PRO
334
56k
Fireside Chat
paigeccino
31
2.9k
The Power of CSS Pseudo Elements
geoffreycrofte
71
5.2k
GitHub's CSS Performance
jonrohan
1029
450k
Building Flexible Design Systems
yeseniaperezcruz
325
37k
Testing 201, or: Great Expectations
jmmastey
36
7k
Building a Modern Day E-commerce SEO Strategy
aleyda
35
6.8k
Understanding Cognitive Biases in Performance Measurement
bluesmoon
25
1.3k
Optimising Largest Contentful Paint
csswizardry
29
2.8k
Transcript
Amazon CloudFront with AWS Certificate Manager @Amimoto_Ami amimoto-ami.com
Architecture
Amazon CloudFront AWS Certificate Manager w )JHITQFFEDPOUFOUEFMJWFSZ VTJOH$%/ w "VUPNBUFE44-DFSUJpDBUF
NBOBHFNFOU $BOCFNBEF
Get SSL certification Workflow Preparations
Preparation
ɾadministrator@your_domain ɾhostmaster@your_domain ɾpostmaster@your_domain ɾwebmaster@your_domain ɾadmin@your_domain 7BMJEBUJPOFNBJMBEESFTT
If you have validation e-mail address and receive mails to
it, no setting are required any more. 7BMJEBUJPOFNBJMBEESFTT
If you have no validation e-mail address, follow these steps
to receive mails through AWS SES. 7BMJEBUJPOFNBJMBEESFTT
Set up Amazon SES Workflow Create S3 bucket Preparation
Set up Amazon SES Workflow Create S3 bucket Preparation
Amazon S3 w "NB[PO4JNQMF4UPSBHF4FSWJDF w &BTZUPVTFPCKFDUTUPSBHFTFSWJDF w 8F`MMVTFJUGPSTUPSFNFTTBHFT4&4 "NB[PO4
Add bucket policy Workflow Create S3 bucket
Add bucket policy Workflow Create S3 bucket
None
Click [Create Bucket]
Input Bucket Name and Region then click [Create]
Add bucket policy Workflow Create S3 bucket
Click [Add bucket policy] in Permissions section in Properties
Edit Bucket Policy then [Save]
Bucket Policy https://docs.aws.amazon.com/ses/latest/DeveloperGuide/ receiving-email-permissions.html
Set up Amazon SES Workflow Create S3 bucket Preparation
Amazon SES w "NB[PO4JNQMF&NBJM4FSWJDF w 4FOESFDFJWFFNBJMTFSWJDF w 8F`MMVTFJUGPS$MPVE'SPOU FNBJMWFSJpDBUJPO "NB[PO4&4
Testing e-mail Workflow Create a Receipt Rule
None
Email Receiving — [Rule Sets] — [Create a Receipt Rule]
Click [Add Recipient] after fill in e-mail address to Recipient
Set displayed records to your DNS server. If your DNS
is Route53, simply click [Use Route 53].
After clicking [Use Route 53], some checkbox will appear. Check
them all then [Create Record Sets]. (only for Route 53 user)
Select created S3 bucket click [Next]
Fill in the [Rule name] then click [Next Step]
Setting confirmation. After confirmation, click [Create Rule Set]
Status turns to Enabled when you completed DNS configuration and
its verification.
Testing e-mail Workflow Create a Receipt Rule
Send test mail to created e-mail address from your favourite
mail client software.
If you find a file except AMAZON_SES_SETUP_NOTIFICATION file in S3
bucket, settings are working correct.
Get SSL certification
CloudFront Workflow Certificate Manager
CloudFront Workflow Certificate Manager
AWS Certificate Manager • SSL certification provided by AWS •
Available for CloudFront and ELB • No additional fee • Automatically renewal "84$FSUJpDBUF.BOBHFS
None
Click [Get started]
Input your domain name to [Domain name] field then click
[Review and request]
After confirmation, click [Confirm and request]
Click [Continue]
You’ll see list of certificate status of domains
Open the verification URL with your browser in the mail
in S3 bucket
Open verification URL with your browser, then click [I
Approve]
Success! Congratulations! You finally get SSL certification
Also you can check certificate request status on AWS console.
CloudFront Workflow Certificate Manager
Amazon CloudFront • AWS managed CDN service • Low latency
and reduce server loads • Supports failover if a failure "NB[PO$MPVE'SPOU
None
Choose the distribution you wants to add SSL in Distributions
Click [Edit] in General tab
Select created SSL certification in Custom SSL Certificate
You can see that SSL certificate is set to your
domain. It takes a little while.
http://amimoto-ami.com/slack/ Feel free to contact us:
@Amimoto_Ami amimoto-ami.com THANK YOU! Amazon CloudFront + AWS Certificate Manager