Overview

Use F5 NGINXaaS for AWS to secure traffic by adding SSL/TLS certificates to a deployment.

Supported certificate types and formats

NGINX supports the following certificate formats:

• PEM format certificates.

You can upload these certificates as text, as files, or as secrets from AWS Secrets Manager.

Encrypt your certificates, keys, and PEM files using one of these algorithms:

• RSA
• ECC/ECDSA

Add SSL/TLS certificates

NGINXaaS for AWS supports two ways to manage your certificates and keys securely:

NGINXaaS console: Manage certificates alongside the NGINX configurations that reference them. See Add certificates using the NGINXaaS Console.

AWS Secrets Manager: Fetch secrets directly from AWS Secrets Manager, keeping credentials within AWS. See Add certificates from AWS Secrets Manager.

Certificate rotation

NGINXaaS for AWS supports automatic and manual rotation for AWS Secrets Manager certificates:

Automatic rotation: Let NGINXaaS for AWS pick up new certificate versions automatically with no configuration changes needed. See Rotate an AWS Secrets Manager certificate (automatic).

Manual rotation: When you need to update certificates immediately, use Reapply Configuration in the console to refetch secrets right away. See Rotate an AWS Secrets Manager certificate (manual).