okay so now we're going to be using the AWS certificate manager to create an SSL certificate 2
and we're going to associate that with our domain that we just 3
purchased and by doing that we're going to be able to set up HTTPS for encrypted traffic 4
to our website so we need to go into the AWS certificate manager 5
go to services and certificate manager 6
and if we've never used it before we've got no certificates we'll have a 7
welcome screen here, we don't want to select private certificate authority 8
that is not what you want you'll want to select provision certificates and we'll 9
click on get started there what we want to do is we want to request a public certificate 10
and we click on request a certificate and what we need to do now 11
is that we need to add in our domain names so the first one there thedevkid.com 12
and what we also want to do is actually 13
have this certificate also for our subdomain as well so we might have a 14
WWW.thedevkid.com or we might have user.thedevkid.com or whatever 15
we can put those all in individually if we like, so we just go in here and add 16
another name to this certificate so you can see there we could put 17
in there WWW.example.com but what I'm going to do is I'm going to use a 18
wild-card symbol so just a star and then dot and then thedevkid.com or 19
whatever your domain name is and so what that will do is it will make this certificate 20
valid for any subdomain as well as the root domain as well 21
we click on next and we've got two options here, so when certificate manager first 22
came out there was only email validation, it did cause a few problems with a lot of students 23
because the emails just seem to go missing or they typed in the wrong email 24
when they were doing this certificate 25
this lab is being recreated using the new DNS validation method which i think 26
is a lot quicker and easier and what it does is that because we need to 27
establish an association between our domain name and this certificate what we 28
do is the certificate manager gives us some some records that we need to put 29
into our domain name service and then the certificate many you can pick those 30
up and by doing that he can identify that that that we do actually have 31
power over that that domain, so we click on review and we can see here we've got our 32
domain name and our additional name being our wild-card symbol for all these 33
subdomains and our validation method there is DNS, we click on confirm and 34
request, okay so it'll take a few seconds to to get it things happening 35
so there it is now because we've selected DNS validation we need to create records in route 53 36
now there is actually an easier way, we can actually export these by just 37
downloading this file which will have all those details for us, but there is a 38
much easier way and that is simply to by expanding these domains and in there 39
you've got the name and the cname record type and whatever and we can actually 40
have the certificate manager do it for us so we just click on create record in 41
route 53 and it'll ask us if that's ok and we just click on create and it says 42
success so the DNS record was written to your route 53 hosted zone for that 43
domain it takes up to 30 minutes for that to propagate across the internet 44
and then the certificate manager can pick that up now we should also do that 45
for the wild card domain but we don't need to because they are exactly the 46
same record so you can see here that is exactly the same as that and that is 47
exactly the same as that, so we don't need to do anything we just need to do 48
that once to put that one record, if we do it twice it's just going to override 49
the other record, okay so we click on continue and that will take us to the to 50
the certificate dashboard which will all of our certificates so we've already 51
got one there it's pending validation and it'll take about half an hour so you 52
go away have a cup of coffee whatever you want to do and just come back and 53
just click on refresh icon here until it's it's been validated 54
okay so it's been about 20 minutes or so and after clicking the Refresh icon we can see 55
that the status is now issued so that brings us to the end of this part of the 56
lab coming up next we'll be creating a cloudfront distribution which we'll be 57
putting in front of our static website and that will help us to have really low 58
latency high-speed access to our website no matter where in the globe we are 59
actually located, so I'll see you in the next one