Search code examples
amazon-web-servicessslssl-certificateaws-certificate-manager

Is it possible to implement two-way SSL in AWS Certificate Manager?


Right now I have a server which should only be accessible by clients who have a particular valid certificate installed in their browser. This is called two-way SSL and it's a way to authenticate clients. I was wondering if it is possible to implement this in AWS Certificate Manager?

I'm asking this because when I do this manually, I have to generate client certificates on my machine individually using the CA's certificate and key. But when I use AWS Certificate Manager I don't think the key is accessible for me to generate the client certificates. Is that right? Does that mean that I can not use AWS Certificate Manager if I want to implement two-way SSL?


Solution

  • Currently you cannot use AWS ACM issued certificates as client certificates since it only allows to associate with following AWS services.

    • AWS API Gateway
    • AWS CloudFront
    • AWS ELB/ALB