sslamazon-elastic-beanstalkamazon-elbamazon-route53a-records

Do I need more than one SSL certificate for my AWS EBS/EC2 application


My application domain was bought on GoDaddy, the NS servers point to Route 53. Route53 has A records to Elastic Load Balancers for different urls which manage traffic to my Elastic Beanstalk.

Do I require more than one SSL certificate? Will a wildcard certificate be fine for this scenario (I assume it will be). The reason I'm confused is because of the setup of the system and a lack of understanding how SSL certificates work with A records and Load Balancers.


Solution

  • A wildcard certificate should be sufficient, but you'll need to use CNAME records to map your subdomains to your various ELBs. A records are a recipe for disaster, because the ELBs change IP frequently.

    You'll also need to load your certificate into AWS and create an HTTPS listener for each ELB, which is a lot of fun. See the ELB developer's guide.