在中国区如何使用ACM服务
在国内适用ACM暂时只能通过awscli 或者CDK导入的方式使用ACM服务
AWSCLI
可通过以下脚本进行创建
创建过程注意:
需要安装openssl、所在时区、awscli的权限
[root@ip-172-31-41-173 ~]# sh create-acm.sh
请输入需要生成ACM的域名:htea.com
htea.com
Generating RSA private key, 2048 bit long modulus
..............................+++
...................................................................................................................................+++
e is 65537 (0x10001)
Generating RSA private key, 2048 bit long modulus
.......+++
.........................................................................................................................................+++
e is 65537 (0x10001)
Signature ok
subject=/C=CN/ST=BeiJing/O=SYAVINGCS/CN=test
Getting CA Private Key
Generating RSA private key, 2048 bit long modulus
..........+++
.............+++
e is 65537 (0x10001)
Signature ok
subject=/C=CN/ST=BeiJing/O=SYAVINGCS/CN=htea.com
Getting CA Private Key
{
"CertificateArn": "arn:aws:acm:ap-northeast-1:543300565893:certificate/a50d5b8e-867c-4ee2-8f94-e64f2726555f"
}
通过CDK创建ACM ALB等服务
通过查看视频学习使用CDK部署ACM、ALB等服务