It is past time. Where was this last month? We just started using Let's Encrypt to get certs onto ELBs. With a few mods to stuff on github we can easily generate certs for multiple domains (up to the 100 domain limit) and put them on the ELB.
I'm glad they are getting into this, competition is always good. With the pricing page giving a 404 I can only guess that it will cost more than Let's Encrypt, but if you haven't already rolled your own, it might be a nice option.
Dumb question; I'm not an aws user, but I thought with ELBs you did ssl termination at the load balancer, then unencrypted to downstream servers? But you seem to indicate you have ssl between elb's and downstream? Is that correct?
Not a bad question. You are correct, the ELBs are doing ssl termination, but the way I'm using Let's Encrypt and a 3rd party python script means that each web server needs to be able to answer the challenge on port 80. For web server without a LB, that means you just run the script and it generates the file that needs served up on 80.
With more than one web server you need to be able to server that file up on any instance that might get hit when the challenge request comes in.
For some, DNS might be an easier way to prove domain ownership, but we have clients who control their DNS. Doing it all on the web means it is 100% in our hands.
It is, but using it would require us to use 5x as many ELBs as we need now (100 domains per cert vs 20). For some that isn't a problem and free is a great price.
20 domains on an ELB for a year, $10.80 per domain (ignoring traffic). Or put 5x as many on and get SSL for $2.16 per domain per year (also ignoring traffic).
That said, I'm really happy to see AWS head this way. Even if someone uses them, in min mind Let's Encrypt did its job - drive the cost of SSL down to where everyone can have it.
I'm glad they are getting into this, competition is always good. With the pricing page giving a 404 I can only guess that it will cost more than Let's Encrypt, but if you haven't already rolled your own, it might be a nice option.