how should we set up DNS records (or/and add domain to “Route 53”) for SSL

Question

Currently, we have registered domains outside of AWS account but need to host it on AWS with SSL (issued on the same AWS account).
The question is how we should set up DNS records (or/and add domain to “Route 53”) for SSL so it works for our domain.

Answer

Hello.

Do you use ACM to issue SSL certificates?  
In that case, there is no need to move the hosted zone to Route53.  
After issuing an SSL certificate with ACM, you can use the SSL certificate by adding a CNAME record for authentication to the external hosted zone.  
https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html

If you want to manage your domain with Route53, after creating a hosted zone with Route 53, please rewrite the NS record of the external domain registrar to the NS record listed in the Route53 hosted zone.  
This will delegate your domain to Route53, so you can register and manage your ACM validation CNAME record with Route53.  
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/MigratingSubdomain.html

how should we set up DNS records (or/and add domain to “Route 53”) for SSL

Relevant content