Skip to content
Docs sslbrain sslbrain.com

AWS CloudFront

Copy link to the page “AWS CloudFront”

← All integrations

Cloud service

Imports the certificate into ACM in us-east-1 and puts it on the distribution.

The appliance runs the package and connects to AWS CloudFront through AWS API over HTTPS on port 443. No agent is installed on AWS CloudFront.

What happens

  1. The appliance connects to AWS CloudFront through AWS API on port 443.
  2. The certificate is imported into ACM in us-east-1.
  3. The distribution's viewer certificate points at the new one. The other TLS settings are kept. If it fails: Rollback puts the previous viewer certificate back from the backup.
  4. Verification: the package checks that the distribution points at the new certificate. CloudFront can take a while to roll it out.

Technical details

Connection
The package runs on the appliance, which connects over HTTPS to AWS API, port 443. No agent is installed.
You need
IAM user or role allowed to import, read and delete in ACM and to read and update the distribution (API Key + Secret).
Actions
Discovery, Installation, Verification, Rollback, Removal
Packages
aws-cloudfront-api

Get started