Please Certification Manager instructions to tutorial on Elastic Beanstalk
I prefer to keep all my development within the Amazon ecosystem. To use a SSL web service to power an Alexa skills requires an external purchase, and since Amazon won't provide instructions recommending or using an external service, I (and many others) have avoided deploying in this manner and have used the inefficient hack of a Lambda function pass through to deploy our Alexa skills. All of my skills are running on Elastic Beanstalk. They are deployed according to the tutorials given by Amazon. If I could just add an appropriate SSL certificate to them, I could eliminate my Lambda pass through and buy several hundred milliseconds of response time. The complexity involved and lack of instructions has prevented me doing so, so far. But today I got e-mail announcing this new Amazon service: [i]AWS Certificate Manager is a new service that lets you easily provision, manage, and deploy Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services. SSL/TLS certificates are used to secure network communications and establish the identity of websites over the Internet. AWS Certificate Manager removes the time-consuming manual process of purchasing, uploading, and renewing SSL/TLS certificates. With AWS Certificate Manager, you can quickly request a certificate, deploy it on AWS resources such as Elastic Load Balancers or Amazon CloudFront distributions, and let AWS Certificate Manager handle certificate renewals. SSL/TLS certificates provisioned through AWS Certificate Manager are free. You pay only for the AWS resources you create to run your application.[/i] If the certificates issued by this service are of the quality necessary for deploying an Alexa skill as a web service, please update your tutorial to include instructions on how to use this service to set up your skill with one of these certificates. If these certificates are not suitable, please consider allowing this specific issuing authority approval, as a special case. Just so that someone can develop an Alexa skill and keep entirely within the Amazon ecosystem.
> I'm looking for some inexpensive alternative before I
> have to renew the certificate.
If you don't mind going through the renewal step once every three months, you can use LetsEncrypt. People (myself included) had trouble with it at first, but one of the DAs posted something the other day explaining how to get it working with Alexa.
I'd be interested in the answer this, too.
My enthusiasm about this announcement was slightly tempered to read it only works with Elastic Load Balancer or Cloud Front, which increases the costs for running on AWS. (We're not talking about much, but still: load balancer costs about $18 a month just for time, plus more charges for data transfer.)
Right now I've got a Comodo certificate installed on an AWS single instance (non-load balanced) server. That set up is basically free for the first year.
I'm looking for some inexpensive alternative before I have to renew the certificate.