Securing Communication with Amazon EC2 Endpoints

This section does not apply to Traffic Manager instances running on Microsoft Azure.

To ensure secure communication with Amazon EC2 endpoints, the Traffic Manager can optionally use a Certificate Authority (CA) certificate to verify the identity of your endpoints.

To import the CA certificate into your Traffic Manager instance

First obtain the CA certificate from Amazon for the top level EC2 endpoint, ec2.amazonaws.com.

Copy the certificate to a temporary location on your Traffic Manager instance (for example, by using the scp or similar command).

Verify the certificate by using the httpclient command:

httpclient --verify --CA=<certificate> https://ec2.amazonaws.com/

In the Admin UI, click SSL > CAs and CRLs > Import. Use this page to upload the certificate file to the Traffic Manager's Certificate Authorities catalog.

Click System > Global Settings > EC2 Account Settings.

Set ec2!verify_query_server_cert to Yes to enable verification using the imported CA certificate.