(upbeat music)
- Hello.
I'm Rohit, a cloud support engineer
here at AWS office in Bangalore, India.
Today I'm going to show you what you can do
if Amazon CloudFront is not serving a domain
even though you have already added the SSL certificate
for the domain in the CloudFront distribution.
Let's get started.
As you can see, I'm already logged
in into the AWS management console.
From here, navigate to the CloudFront console.
First, added the, already created distribution setting
and configure the domain name
into the alternate domain name filled.
For this example, I'm using my custom domain name
www.rohitcf.info
If you requesting an SSL certificate,
then be sure that SSL certificate has a domain name
that you want to add as an alternate domain name
in your CloudFront distribution setting.
When you add an alternate domain name to the distribution,
CloudFront check whether or not that alternate domain name
is covered by the certificate that you have attached.
I want to highlight www.rohitcf.info
Click to request or import an SSL certificate from from ACM.
Or you can also upload and import
an SSL certificate to the IM using AWS CLA .
I am using ACM in this video.
In the new tab, ACM that opens.
Add the alternate domain into the domain name section.
I have added the SSL certificate like
*.rohitcf.info
Choose next.
Then, choose a process to validate that you own
or control the domain that you
are requesting the certificate for.
You can validate ownership by using DNS
or by sending an email to the contact address
of the domain owner.
I choose DNS validation, then I click to review
and confirm the request.
In this example, I am using Route 53 as a DNS provider.
So, I click to create record in Route 53.
Click to continue.
Then the SSL certificate is validated and issue.
Then go back to the CloudFront console
and refresh the browser to see your certificate
in the custom SSL certificate section.
You should able to view the newly added certificate
into your custom SSL certificate section.
Add the alternate domain name into the CNAME section
and choose yes to add it.
Your custom domain name is configured on CloudFront.
Now, wind your domain name to the CloudFront.
I have the demonstrated this in the video using Route 53.
If you are not using Route 53 to manage your domain,
then reach out to your DNS provider if you need assistance
to create the CNAME record.
Move to the Route 53 console.
In the Route 53 console, choose the hosted zone,
then choose the custom domain name
from the list of hosted zone.
If the custom name is the apex domain,
then click record set with type A.
Choose alias yes and then choose the CloudFront distribution
from the alias target list.
In my example, I am making use of subdomain
that is www.rohitcf.info
is winding to the CloudFront.
Now, click to create.
To confirm that your domain is winding
to CloudFront, you can use the dig or nslookup command.
When your domain name winds to CloudFront successfully,
then open your browser and access
your domain name using HTTPS.
Now you can access the domain successfully.
Thanks for watching and happy cloud computing
from all of us here at AWS.
(upbeat music)