cloud engineer
Here’s how to update AWS Certificate Manager SSL Cert.
#!/bin/bash cd /etc/letsencrypt/live/domain.com/ arn='arn:aws:acm:us-east-1:xxxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' aws acm import-certificate \ --certificate fileb://cert.pem \ --certificate-chain fileb://chain.pem \ --private-key fileb://privkey.pem \ --certificate-arn $arn \ --region us-east-1 |
You can run this every time certbot updates your certificate. Or you can schedule it in crontab.
Here’s how to get a list of certificates in AWS Certificate Manager.
aws acm list-certificates \ --profile default \ --region us-east-1 \ --output text \ --query 'CertificateSummaryList[*].{ARN:CertificateArn,Domain:DomainName}' |
Here’s how to import a SSL certificate into AWS Certificate Manager.
aws acm import-certificate \ --certificate file://example.crt \ --private-key file://example.key \ --certificate-chain file://example-bundle.crt |
If you’ve imported or created a SSL certificate via AWS Certificate Manager, here’s the CLI to display a list of certificates.
aws acm list-certificates |
Once you have the arn, you can describe certificate. Get the arn from the output above.
aws acm describe-certificate --certificate-arn arn-xxxxxxxxxxxxxxxxxx |