Add HTTPS

​

Overview

1. Register a domain (or use an existing one)
2. Create an SSL certificate in AWS ACM
3. Configure your load balancer to use HTTPS

​

Step 1: Set Up Your Domain

​

Step 2: Create SSL Certificate

1

Request certificate

Go to AWS ACM and request a certificate for your domain (e.g., *.yourdomain.com or api.yourdomain.com).

2

Validate the certificate

Choose DNS validation. ACM will provide CNAME records to add to Route 53.Click “Create records in Route 53” to add them automatically.

Certificate validation takes 5-30 minutes. Wait until status shows “Issued”.

3

Copy the certificate ARN

Once issued, copy the ARN. It looks like:

arn:aws:acm:us-east-1:[ACCOUNT_ID]:certificate/[CERTIFICATE_ID]

​

Step 3: Configure Load Balancer

prd_fastapi = FastApi(
    ...
    load_balancer_enable_https=True,
    load_balancer_certificate_arn="arn:aws:acm:us-east-1:[ACCOUNT_ID]:certificate/[CERTIFICATE_ID]",
)

ag infra up --env prd --infra aws --name listener

ag infra up prd:aws::listener

ag infra patch --env prd --infra aws --name listener

ag infra patch prd:aws::listener

​

Verify HTTPS Works

curl https://api.yourdomain.com/health

{"status": "ok", "instantiated_at": "..."}

​

Troubleshooting