[Wishlist] allow updating of CloudFront certificates too
grischard opened this issue · 3 comments
From an API perspective, what's involved in updating a cloudfront cert? If
you can point me to the API, I think it'd be straigthforward.
On Tue, Apr 5, 2016 at 3:47 PM, Guillaume Rischard <notifications@github.com
wrote:
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub
#41
"I disapprove of what you say, but I will defend to the death your right to
say it." -- Evelyn Beatrice Hall (summarizing Voltaire)
"The people's good is the highest law." -- Cicero
GPG Key fingerprint: D1B3 ADC0 E023 8CA6
Thank you! It looks like you need to update the ViewerCertificate part of the CloudFront distribution config:
Maybe
https://boto3.readthedocs.org/en/latest/reference/services/cloudfront.html#CloudFront.Client.get_distribution_config to get the config object, get the IamCertificateId to check for expiration, then update the object to set CloudFrontDefaultCertificate to false and IamCertificateId to the new one, then https://boto3.readthedocs.org/en/latest/reference/services/cloudfront.html#CloudFront.Client.update_distribution to set the new config.
The port is irrelevant for cloudfront, there's only one certificate per distribution.