Question

A CloudOps engineer is deploying a global web application that uses Amazon CloudFront as the CDN with a custom domain name. The engineer requests an ACM certificate in the eu-west-1 Region (where the origin ALB resides) and attempts to associate it with the CloudFront distribution, but the certificate does not appear as a selectable option in the CloudFront console. What is the correct action to resolve this?

Accepted Answer

Request or import the ACM certificate in the us-east-1 Region, because CloudFront only accepts certificates from us-east-1.

Answer

Enable cross-region certificate replication on the eu-west-1 certificate so CloudFront can reference it.

Answer

Attach the ACM certificate to the origin ALB first, then CloudFront will automatically inherit it.

Answer

Convert the ACM certificate to an IAM server certificate and upload it to the us-east-1 Region.