Overview
Use F5 Application Delivery Service for AWS (F5 ADS) to secure traffic by adding SSL/TLS certificates to a deployment.
NGINX supports the following certificate formats:
- PEM format certificates.
You can upload these certificates as text, as files, or as secrets from AWS Secrets Manager.
Encrypt your certificates, keys, and PEM files using one of these algorithms:
- RSA
- ECC/ECDSA
F5 ADS supports two ways to manage your certificates and keys securely:
F5 ADS console: Manage certificates alongside the NGINX configurations that reference them. See Add certificates using the F5 ADS Console.
AWS Secrets Manager: Fetch secrets directly from AWS Secrets Manager, keeping credentials within AWS. See Add certificates from AWS Secrets Manager.
F5 ADS supports automatic and manual rotation for AWS Secrets Manager certificates:
Automatic rotation: Let F5 ADS pick up new certificate versions automatically with no configuration changes needed. See Rotate an AWS Secrets Manager certificate (automatic).
Manual rotation: When you need to update certificates immediately, use Reapply Configuration in the console to refetch secrets right away. See Rotate an AWS Secrets Manager certificate (manual).