Documentation Should Mention that `us-east-1` ACM Certificates Are Required about terraform-aws-cloudfront-s3-cdn HOT 6 CLOSED

@mojeto
thank you for testing and submitting the issue.
I think what you have is related to how AWS operates. Although ACM is supported in many regions, to use a certificate with CloudFront, it should be requested only in US East (N. Virginia) region.

https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cnames-and-https-requirements.html

If you want to require HTTPS between viewers and CloudFront, you must change the AWS region to US East (N. Virginia) in the AWS Certificate Manager console before you request or import a certificate.
If you want to require HTTPS between CloudFront and your origin, and you're using an ELB load balancer as your origin, you can request or import a certificate in any region.

https://docs.aws.amazon.com/acm/latest/userguide/acm-regions.html

To use an ACM Certificate with Amazon CloudFront, you must request or import the certificate in the US East (N. Virginia) region. ACM Certificates in this region that are associated with a CloudFront distribution are distributed to all the geographic locations configured for that distribution.

https://stackoverflow.com/questions/37289994/aws-certificate-manager-do-regions-matter

This is an AWS restriction, and you need to request the same cert in us-east-1.

from terraform-aws-cloudfront-s3-cdn.

@aknysh and @osterman thank you guys. I didn't know that. I've spent too much time checking the code is right and forgot to check AWS limitations. I suggest pointing these limitation out in Generating ACM Certificate in README.md. It would help me.

from terraform-aws-cloudfront-s3-cdn.

@mojeto
we'll update README, thanks

from terraform-aws-cloudfront-s3-cdn.

@aknysh is correct. This is a fundamental requirement of CloudFront.

from terraform-aws-cloudfront-s3-cdn.

Ya, that's a good suggestion. I'm going to rename the issue to reflect that.

from terraform-aws-cloudfront-s3-cdn.

@mojeto
we updated README about using SSL cert with CloudFront.
Merged into master.
https://github.com/cloudposse/terraform-aws-cloudfront-s3-cdn/releases/tag/0.1.5

from terraform-aws-cloudfront-s3-cdn.