<div id="readability-page-1" class="page"><section>
			
			

			
			<article>
				
				### 1. 실행 환경

* Macbook, Monterey

### 2. certbot, certbot-dns-route53 Plugin 설치

```
$ sudo python3 -m venv /opt/certbot/
$ sudo /opt/certbot/bin/pip install --upgrade pip
$ sudo /opt/certbot/bin/pip install certbot
$ sudo ln -s /opt/certbot/bin/certbot /usr/local/bin/certbot
$ sudo /opt/certbot/bin/pip install certbot-dns-route53
```

### 3. letsencrypt IAM User 생성 &amp; 설정, Access Key 생성

```
$ aws iam create-user --user-name letsencrypt
$ {
 "User": {
 "Path": "/",
 "UserName": "letsencrypt",
 "UserId": "AIDA2S2LVTEOIYTEXDCLM",
 "Arn": "arn:aws:iam::727618787612:user/letsencrypt",
 "CreateDate": "2022-12-05T03:37:20+00:00"
 }
}

$ aws iam create-access-key --user-name letsencrypt
{
 "AccessKey": {
 "UserName": "letsencrypt",
 "AccessKeyId": "{AWS_Access_ID"},
 "Status": "Active",
 "SecretAccessKey": "{AWS_Secret_Key}",
 "CreateDate": "2022-12-05T03:38:49+00:00"
 }
}
```

### 4. letsencrypt IAM User에 Policy 적용

<figure><pre><code data-lang="json">{
 "Version": "2012-10-17",
 "Statement": [
 {
 "Effect": "Allow",
 "Action": [
 "route53:ListHostedZones",
 "route53:GetChange",
 "route53:ChangeResourceRecordSets"
 ],
 "Resource": [
 "*"
 ]
 }
 ]
}</code></pre></figure>
<figure>
<figcaption>[파일 1] letsencrypt-policy.json</figcaption>
</figure>

```
$ aws iam create-policy --policy-name letsencrypt-policy --policy-document file://letsencrypt-policy.json
{
 "Policy": {
 "PolicyName": "letsencrypt-policy",
 "PolicyId": "ANPA2S2LVTEOK36NCEQX6",
 "Arn": "arn:aws:iam::727618787612:policy/letsencrypt-policy",
 "Path": "/",
 "DefaultVersionId": "v1",
 "AttachmentCount": 0,
 "PermissionsBoundaryUsageCount": 0,
 "IsAttachable": true,
 "CreateDate": "2022-12-05T04:03:02+00:00",
 "UpdateDate": "2022-12-05T04:03:02+00:00"
 }
}

$ aws iam attach-user-policy --user-name letsencrypt --policy-arn arn:aws:iam::727618787612:policy/letsencrypt-policy
```

### 5. 인증서 생성

<figure><pre><code data-lang="text">[letsencrypt]
aws_access_key_id={AWS_Access_ID}
aws_secret_access_key={AWS_Secret_Key}</code></pre></figure>
<figure>
<figcaption>[파일 2] AWS Credential</figcaption>
</figure>

```
$ sudo certbot certonly --dns-route53 -n -d "aws-playground.dev" -d "*.aws-playground.dev" --email supsup5642@gmail.com --agree-tos
```

### 6. 참조

* [https://certbot.eff.org/instructions?ws=other&amp;os=pip](https://certbot.eff.org/instructions?ws=other&amp;os=pip)
* [https://www.skyer9.pe.kr/wordpress/?p=823](https://www.skyer9.pe.kr/wordpress/?p=823)
				
				
					
					<ins data-ad-client="ca-pub-2913607840371995" data-ad-slot="7197718666" data-ad-format="auto"></ins>
					
				

				
				
					
				
			</article>
		</section></div>

Ssup2 Blog

### 1. 실행 환경
* Macbook, Monterey
### 2. certbot, certbot-dns-route53 Plugin 설치
```
$ sudo python3 -m venv /opt/certbot/
$ sudo /opt/certbot/bin/pip install --upgrade pip
$ sudo /opt/certbot/bin/pip install certbot
$ sudo ln -s /opt/certbot/bin/certbot /usr/local/bin/certbot
$ sudo /opt/certbot/bin/pip install certbot-dns-route53
```
### 3. letsencrypt IAM User 생성 & 설정, Access Key 생성
```
$ aws iam create-user --user-name letsencrypt
$ {
    "User": {
        "Path": "/",
        "UserName": "letsencrypt",
        "UserId": "AIDA2S2LVTEOIYTEXDCLM",
        "Arn": "arn:aws:iam::727618787612:user/letsencrypt",
        "CreateDate": "2022-12-05T03:37:20+00:00"
    }
}
$ aws iam create-access-key --user-name letsencrypt
{
    "AccessKey": {
        "UserName": "letsencrypt",
        "AccessKeyId": "{AWS_Access_ID"},
        "Status": "Active",
        "SecretAccessKey": "{AWS_Secret_Key}",
        "CreateDate": "2022-12-05T03:38:49+00:00"
    }
}
```
### 4. letsencrypt IAM User에 Policy 적용
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "route53:ListHostedZones",
        "route53:GetChange",
        "route53:ChangeResourceRecordSets"
      ],
      "Resource": [
        "*"
      ]
    }
  ]
}
[파일 1] letsencrypt-policy.json
```
$ aws iam create-policy --policy-name letsencrypt-policy --policy-document file://letsencrypt-policy.json
{
    "Policy": {
        "PolicyName": "letsencrypt-policy",
        "PolicyId": "ANPA2S2LVTEOK36NCEQX6",
        "Arn": "arn:aws:iam::727618787612:policy/letsencrypt-policy",
        "Path": "/",
        "DefaultVersionId": "v1",
        "AttachmentCount": 0,
        "PermissionsBoundaryUsageCount": 0,
        "IsAttachable": true,
        "CreateDate": "2022-12-05T04:03:02+00:00",
        "UpdateDate": "2022-12-05T04:03:02+00:00"
    }
}
$ aws iam attach-user-policy --user-name letsencrypt --policy-arn arn:aws:iam::727618787612:policy/letsencrypt-policy
```
### 5. 인증서 생성
[letsencrypt]
aws_access_key_id={AWS_Access_ID}
aws_secret_access_key={AWS_Secret_Key}
[파일 2] AWS Credential
```
$ sudo certbot certonly --dns-route53 -n -d "aws-playground.dev" -d "*.aws-playground.dev" --email supsup5642@gmail.com --agree-tos
```
### 6. 참조
* [https://certbot.eff.org/instructions?ws=other&os=pip](https://certbot.eff.org/instructions?ws=other&os=pip)
* [https://www.skyer9.pe.kr/wordpress/?p=823](https://www.skyer9.pe.kr/wordpress/?p=823)

certbot 인증서 생성 / AWS Amazon Route53

댓글