My app is divided into a web app and an API server. Both are hosted on separate AWS instances. The API server is enabled for autoscaling.

This question is with regard to my API server. What's the way to configure a free SSL certificate with auto-renewals (e.g. the one from Let's Encrypt) over its autoscaling group?

Configuring it on one machine is trivial, however I can't wrap my head around doing it for an entire autoscaling group. I haven't been able to find docs that refer to this scenario either. Can you point out everything step by step?

Thanks in advance

CodePudding user response：

You can put your ASG in an ALB & add port 443 (HTTPS) as the listener for it. Refer this doc.

You can get free SSL from AWS itself in ACM. Issue it for you domain name & assign it to ALB.

Also, ACM keeps renewing automatically after expiration for free & without any inputs from user.