Can I reimport an AWS ACM certificate with a different certificate provider?

0

I have an imported ACM certificate (coming from certproviderA) which is about to expire and it is associated to 15 resources in my AWS account. I need to change the certificate provider to certproviderB, I have already issued the new certificate with the same domain name and SAN. My question is if I can do a reimport on my original ACM certificate and paste the values from the new certificate (from certproviderB); I mean, will this work? Or will I have an error because the original certificate was coming from certproviderA? What I would like to avoid is having to import a certificate from scratch and associate all 15 resources to it. If I could just reimport the same cert, I would not have to worry about the resources association. Thanks in advance Cheers Alejandro

질문됨 4달 전269회 조회
2개 답변
2
수락된 답변

Hi,

AWS Certificate Manager can support the re-import feature. The ARN of the certificate will not change and the newly imported certificate will be automatically deployed to the associated resources. However, during the reimport process we have some restrictions on old and new certificate:

  • You can add or remove domain names.
  • You cannot remove all of the domain names from a certificate.
  • If Key Usage extensions are present in the originally imported certificate, you can add new extension values, but you cannot remove existing values.
  • If Extended Key Usage extensions are present in the originally imported certificate, you can add new extension values, but you cannot remove existing values.
  • The key type and size cannot be changed.
  • You cannot apply resource tags when reimporting a certificate.

However, there is no restriction that your Issuer must be the same CA, so even if the CA is changed, you still can perform reimport as long as the above conditions are met.

https://docs.aws.amazon.com/acm/latest/userguide/import-reimport.html

profile picture
답변함 4달 전
profile picture
전문가
검토됨 2달 전
profile picture
전문가
검토됨 4달 전
0

Thank you, I will proceed then to reimport it later on. Cheers!

답변함 4달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠