How do I associate an ACM SSL/TLS certificate with an Application, Network, or Classic Load Balancer?

Short description

ACM is integrated with Elastic Load Balancing (ELB). Use ACM to request a public certificate, or you can import a certificate into ACM. After you create or import your certificate, you can associate the certificate with your Application, Network, or Classic Load Balancer. If you request a public certificate from ACM, then you can't export private keys for ACM issued public certificates.

Note: You can't directly install Amazon issued certificates on Amazon Elastic Compute Cloud (EC2) instances. Instead, use the certificate with a load balancer, and then register the Amazon EC2 instance behind the load balancer.

Resolution

Note: You must request or import ACM certificates in the same AWS Region as your Load Balancer.

Associate an ACM SSL certificate with a Load Balancer

To associate an ACM SSL certificate with an Application Load Balancer or Network Load Balancer, add an HTTPS listener to your load balancer. Or, configure an HTTPS listener for your Classic Load Balancer.

Note: Application Load Balancers use Server Name Identification (SNI) to support multiple SSL/TLS certificates.

Related information

Create an HTTP listener for your Application Load Balancer

New - TLS termination for Network Load Balancers

Why can't I find my imported ACM certificate for my load balancer or Amazon CloudFront distribution?