Score:0

How are AWS IAM server certificates meant to be used?

us flag

The aws iam upload-server-certificate command in the AWS CLI allows one to upload a certificate. However, I don't know how it can be applied afterwards. The aws iam commands include listing, modifying and deleting certificates, but not connecting them with any resources. Can they be used from EC2? Also, they don't seem to appear on the AWS Certificate Manager.

Tim avatar
gp flag
Tim
I think IAM certificates are effectively deprecated. Suggest you look into AWS Certificate Manager https://aws.amazon.com/certificate-manager/ . ACM created or imported certificates can be used for ALBs and in a few other services.
Nick avatar
cn flag
@Tim there are regions in which ACM is not available (those in China mostly) where uploading your certs to IAM could become handy
Tim avatar
gp flag
Tim
China is a bit of an edge case with AWS, but you could be right, I've never used China regions.
Score:1
cn flag

It is recommended to use ACM for storing (or issuing certificates), but as per my comment above in case ACM is not supported within a region then you can upload the certificate to IAM.

Such a certificate could then be used in an Application Load Balancer or Network Load balancer or by setting up a Custom SSL in your CloudFront distribution.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.