asp.net - 如何在 Windows 和 .NET 上运行的 AWS ElasticBeanstalk 上自动安装 SSL 证书？

Question

有没有办法使用 SSL 证书自动部署基于 .NET/Windows 的 Amazon Elastic Beanstalk 实例？

我已经在 SSL 证书设置中拥有指向 Beanstalk 实例的域的 DNS。

我可以远程进入并手动配置服务器，但我想知道是否有办法让它成为部署包的一部分(类似于 Windows Azure 所拥有的)。

如果这不是 Elastic Beanstalk 内置的，在部署(或更新)我的实例后是否有任何 Hook 可以运行 PowerShell 脚本？

Answer 1

AWS Elastic Beanstalk Developer Guide 说明了如何为您的 Elastic Beanstalk 环境启用 SSL 证书。
相关部分是:

Controlling the HTTPS port

Elastic Load Balancing supports the HTTPS/TLS protocol to enable traffic encryption for client connections to the load balancer. Connections from the load balancer to the EC2 instances are done using plaintext. By default, the HTTPS port is turned off.

To turn on the HTTPS port

• Create and upload a certificate and key to the AWS Access and Identity Management (AWS IAM) service. The IAM service will store the certificate and provide an Amazon Resource Name (ARN) for the SSL certificate you've uploaded. For more information creating and uploading certificates, see the Managing Server Certificates section of Using AWS Identity and Access Management.

• Specify the HTTPS port by selecting a port from the HTTPS Listener Port drop-down list.

• In the SSL Certificate ID text box, enter the Amazon Resources Name (ARN) of your SSL certificate (e.g., arn:aws:iam::123456789012:server-certificate/abc/certs/build). Use the SSL certificate that you created and uploaded in step 1. For information on viewing the certificate's ARN, see Verify the Certificate Object topic in the Creating and Uploading Server Certificates section of the Using IAM Guide.