Skip to content

Certificates (ALB HTTPS)

Attach certificates to ALB HTTPS listeners with the certificates field.

Usage:

  • Request/import certificates under certificates at the environment level (keys match what listeners use).
  • Reference certificate keys in listeners.<name>.certificates.
  • Multiple certs enable SNI.

Example

# Environment certificate entries
certificates = {
  my_cert = { /* request or import config here */ }
  alt_cert = { /* another cert */ }
}

# Listener with SNI
lbs = {
  app-alb = {
    listeners = {
      https443 = {
        port         = "443"
        protocol     = "HTTPS"
        certificates = ["my_cert", "alt_cert"]
        default_action = { type = "fixed-response", fixed_response = {} }
      }
    }
  }
}