CF distro and ACM certificate in different account

0

Is it possible to create a CF distro in account A using an ACM's issued certificate sitting in account B?

CF doc states it is NOT possible (https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cnames-and-https-limits.html) but I can see a customer config (in ACM console) where a certificate is listing as associated resources CF distros belonging to a different account

I have tried to do so (via CFN) and I am getting a "The specified SSL certificate doesn't exist, isn't in us-east-1 region, isn't valid, or doesn't include a valid certificate chain" error msg so I am not sure whether it is a poor error messaging (i.e. access denied due to cross-account attempt) or smth else going on

Thanks!

管理員
已提問 6 年前檢視次數 898 次
1 個回答
0
已接受的答案

ACM does not currently support cross account access. CloudFront distributions checks ACM certs in the account where they belong to. You can use the same certificate for CloudFront distributions that were created by using different AWS accounts if it's a third-party CA certificate (not provided by ACM) imported into ACM (for the account where the distribution belongs to).

AWS
已回答 6 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南