Usando AWS re:Post, accetti AWS re:Post Termini di utilizzo
AWS re:Postre:Post

Can't Delete Certificate because there are Dangling Load Balancer Resources

0

Hello AWS,

I have a custom domain (registered via Route53) and created API Gateway resources for this custom domain yesterday.

After deleting ALL (!!!) API Gateway resources and even doing an "aws-nuke" on my account, I still have API Gateway load balancers associated with my ACM certificate.

The ARNs for the load balancer resources look like this: "arn:aws:elasticloadbalancing:eu-central-1:<some-aws-account-id>:loadbalancer/app/prod-fra-1-az1-1-31/<some-mores-stuff>"

This is annoying as I cannot delete the certificate as long as these association hold.

Can anybody help me with this?

Best, David

Argomenti
Networking e distribuzione di contenutiServerlessFront-end web e dispositivi mobiliSicurezza, identità e conformità
Tag
Equilibratore di carico gatewayGateway API di AmazonGestore certificati AWS
Lingua
English
maehster
posta 2 anni fa3080 visualizzazioni
2 Risposte
1
Risposta accettata

When you associate an ACM certificate with an API Gateway, the service creates the backing resource (CF Distro or ALB, depending on your API GW deployment). Although you have deleted the API GW resource on your end, unfortunately the association hasn't been removed on the backing-resource end.

So, how do you fix this? Raise a case with AWS Premium Support, under the ACM service. If you're not currently paying for a support plan (Dev, Business, or Ent) then simply raise a case with Customer Support (covered by the free-tier support plan) and simply link them to this forum question. From there, they can reach out to the ACM support team and get the association removed for you.

Also, in case cost is a concern - ACM public certs are free of charge, so no cost is being incurred by you for having the cert remain in your account.

profile pictureAWS
Ciaran Carragher
con risposta 2 anni fa
  • maehster
    2 anni fa

    Thanks for answering, will do that. Thought I might have missed something but already had the feeling that it's a bug.

0

There might be an API Gateway custom domain associated with the certificate. To remove the binding and allow ACM to delete your certificate, you need to remove the API Gateway custom domain first.

See: https://aws.amazon.com/premiumsupport/knowledge-center/acm-certificate-resources/

AWS
Naj_AWS
con risposta 2 anni fa
  • maehster
    2 anni fa

    Please read the question carefully. I deleted EVERYTHING else in my account and the resources are still there. So I don't have ANYTHING in my API Gateway service and in any other service.

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande

Contenuto pertinente