没有云端的 S3 上的 https? [英] https on S3 WITHOUT cloudfront possible?

问题描述

我们目前希望开始通过 AWS S3 托管我们的所有资产，并且我们还希望通过 https 提供所有服务.我了解我可以将 Amazon Certificate Manager (ACM) 与 Cloudfront 一起使用，以通过 https 来服务器资产.问题是我们从事医疗行业，法律禁止我们在欧盟以外举办任何活动.使用 S3，我可以选择一个位置(对我们来说是法兰克福)，但使用 Cloudfront，我只能得到这个选项:

We currently want to start hosting all our assets through AWS S3 and we also want to server everything over https. I understand I can use the Amazon Certificate Manager (ACM) with Cloudfront to server assets over https. The problem is that we are in the medical industry and we are legally prohibited to host anything outside the EU. With S3 I can choose a location (Frankfurt for us), but with Cloudfront I just get this option:

所以我想我也许可以使用 Letsencrypt 来生成我自己的证书.但是我认为我仍然需要使用仅适用于 Cloudfront 的 ACM，这意味着我仍然无法使用它.

So I thought that I could maybe use Letsencrypt to generate my own certs. But I think I then still need to use ACM which only works with Cloudfront, which means I still can't use it.

有人知道我是否可以以某种方式使用 https 设置 S3，但没有 cloudfront?

Does anybody know if I can somehow setup S3 with https but without cloudfront?

推荐答案

很遗憾，您无法将 SSL 证书与您的自定义域与 S3 一起使用.您可以将 S3 域与 Amazon SSL 证书一起使用，例如:https://my-example-bucket.s3-website-us-east-1.amazonaws.com.

Unfortunately you can't use an SSL certificate with your custom domain with S3. You can use the S3 domain with the Amazon SSL certificate like: https://my-example-bucket.s3-website-us-east-1.amazonaws.com.

如果您想使用带有 SSL 的自定义域，并且您不能使用 CloudFront，那么您需要考虑在 S3 前面放置一些其他代理，例如您自己的 Nginx 服务器或其他东西.

If you want to use a custom domain with SSL, and you can't use CloudFront, then you will need to look into placing some other proxy in front of S3 like your own Nginx server or something.

这篇关于没有云端的 S3 上的 https?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！