amazon-web-services - 我可以将 AWS Certificate Manager 与 Heroku SSL 一起使用吗？

Question

是否可以AWS Certificate Manager与 Heroku SSL为我的 Heroku 应用启用 SSL？

如果是，怎么做到的？

如果没有，我如何获得免费的 SSL/TLS 证书？我应该只使用 Let's Encrypt 吗？ ？

Answer 1

是的，你可以用一个小技巧。按照以下步骤操作:

1. Create a certificate from AWS Certificate Manager and approve it
2. Create a Cloudfront distribution with the Origin Domain Name as your heroku URL such as myapp.herokuapp.com and the custom SSL certificate as the one you created from the AWS Cert Manager
3. While creating the distribution, make sure that you have the TTL as 0, else all the responses will be cached
4. Assuming that you have the DNS managed by Route53 (if it's not - you have to), point the domain name to the Cloudfront Distribution by creating an A record

缺点是，如果您在网站上获得太多点击，您的云端账单可能会增加，有一天您可能会考虑每月向 Heroku 支付 20 美元来支付同样的费用!