Can I associate multiple SSL certificates with my Amazon CloudFront distribution?

Last updated: 2019-04-18

I'm serving multiple CNAMEs (alternate domain names) through my Amazon CloudFront distribution, and I want to enable Secure Sockets Layer (SSL) or HTTPS for all the associated CNAMEs. Do I need to associate multiple SSL certificates to the CloudFront distribution, using one certificate for each CNAME? 


You can't associate more than one SSL or Transport Layer Security (TLS) certificate to an individual CloudFront distribution. However, certificates provided by AWS Certificate Manager (ACM) support up to 10 subject alternative names, including wildcards. To enable SSL or HTTPS for multiple domains served through one CloudFront distribution, assign a certificate from ACM that includes all the required domains.

To use your own SSL certificate for multiple domain names with CloudFront, import your certificate into ACM or the AWS Identity and Access Management (IAM) certificate store. For instructions, see Importing an SSL/TLS Certificate.

Did this article help you?

Anything we could improve?

Need more help?