Hacker News Reader

Comment by tacos | Hacker News Reader

On AWS you can get free SSL certificates from AWS. https://aws.amazon.com/certificate-manager/

Only free if you have Elastic Load Balancer running for each domain. If you're hosting a dozen micro-sites on a box, the Certificate Manager path gets a little expensive

/me looks at his February bill and remembers the lesson all too well

Also free for static sites hosted on Cloudfront. Doesn't solve your problem, just thought I'd mention it in the interest of possible interest.

Considering alex/letsencrypt-aws is also designed specifically for ELB, I think the comparison to ACM is appropriate.

From what I can tell, the only reasons to use alex/letsencrypt-aws (IAM certificates) instead of AWS Certificate Manager are if you're either 1, provisioning ELBs in a region other than us-east-1 and unable to wait for Amazon to roll out ACM to other regions; or 2, subsequently applying the same certificate to other resources in addition to ELB+CloudFront (e.g., a standalone EC2 instance running nginx or apache).

Not sure I understand this pricing implication. Did you run separate ELB for each domain name?

Even cheapo static S3 sites are free if they're behind CloudFront.

Unfortunately, right now ACM only works with CloudFront distributions or with ELBs in us-east-1. If you're running ELBs in another region, you can't use ACM on them.

Unfortunately doesn't work with AWS Lambda/API Gateway. Especially odd as Lambda has Cloudfront on the top of it, but shrug.

Unfortunately it looks as though letsencrypt-aws won't either.

Would it be possible to use letsencrypt-aws on a AWS Lambda + API Gateway + Route 53 setup?

Reply on news.ycombinator.com