AWS Certificate Manager - Generating Certificates for Subdomains Only

Question

I am using CloudFlare to manage my domain, and with that, I have enabled SSL for this domain.

However, I created a subdomain with a CNAME record pointing to CloudFront, without cache, without any kind of SSL, without any kind of security for the subdomain.

In other words, CloudFlare is not hiding the real address of the CloudFront address.

When creating the digital certificate in AWS Certificate Manager for the subdomain, I do the validation using CNAME (without CloudFlare cache), however, there is an error in validation.

Does anyone know how to solve this?

Thank you!

Answer

Hi,

A few things come to mind:
1. To use an ACM certificate with CloudFront, make sure you request (or import) the certificate in the US East (N. Virginia) Region (us-east-1).
2. Have you configured your custom subdomain in CloudFront?

You can check this [link](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cnames-and-https-requirements.html) to find information on how to configure CloudFront certificates.

AWS Certificate Manager - Generating Certificates for Subdomains Only

Relevant content