Problem Description:
Amazon Certificate Manager (ACM) is not available for use in all regions/partitions. In these regions/partitions, it will be necessary to use Identity and Access Management (IAM) to host SSL certificates used for ELB-based SSL-termination. To maximize portability, ELB templates should allow use of either ACM- or IAM-hosted SSL certificates.
Expected Behavior:
ELBs support SSL-termination whether ACM is available for use in a given region/partition.
Actual Behavior:
ELBs do not currently support SSL-termination when ACM is unavailable for use in a given region/partition.
Affected Components
The following templates need remediation:
make_jira-dc_ELBv1-pub.tmplt.jsonmake_jira-dc_ELBv2-pub.tmplt.jsonmake_jira-dc_parent-EFS-ELBv1.tmplt.jsonmake_jira-dc_parent-EFS-ELBv2-autoscale.tmplt.jsonmake_jira-dc_parent-EFS-ELBv2-instance.tmplt.json
Fix recommendation:
Add a Condition{} and Parameters{} components and associated logic within the Resources{} sections to support selection of ACM- or IAM-hosted SSL certificates when launching an ELB template.
Problem Description:
Amazon Certificate Manager (ACM) is not available for use in all regions/partitions. In these regions/partitions, it will be necessary to use Identity and Access Management (IAM) to host SSL certificates used for ELB-based SSL-termination. To maximize portability, ELB templates should allow use of either ACM- or IAM-hosted SSL certificates.
Expected Behavior:
ELBs support SSL-termination whether ACM is available for use in a given region/partition.
Actual Behavior:
ELBs do not currently support SSL-termination when ACM is unavailable for use in a given region/partition.
Affected Components
The following templates need remediation:
make_jira-dc_ELBv1-pub.tmplt.jsonmake_jira-dc_ELBv2-pub.tmplt.jsonmake_jira-dc_parent-EFS-ELBv1.tmplt.jsonmake_jira-dc_parent-EFS-ELBv2-autoscale.tmplt.jsonmake_jira-dc_parent-EFS-ELBv2-instance.tmplt.jsonFix recommendation:
Add a
Condition{}andParameters{}components and associated logic within theResources{}sections to support selection of ACM- or IAM-hosted SSL certificates when launching an ELB template.