- We can request a certificate from AWS Certificate Manager, passing the domain name and a validation method:
aws acm request-certificate \ --domain-name www.qnatime.net \ --validation-method DNS \ --profile admin
Validation methods available at DNS and email. With DNS, we need to create a CNAME record in our domain's DNS records to verify the ownership of the domain. With email, we can verify using an email address. DNS is the preferred way, as per the AWS documentation.
This command will return the ARN certificate:
- We can now use the describe-certificate subcommand to see the status, along with validation information: