lmao I hit the SAN limit for AWS certificate manager
do I really want to create an AWS support case today
oh shit ACM supports wildcard certs
@iliana yeah, and alternate cert names. it seems really handy, until you try to use ACM certs with something that doesn't support it, and discover it's not really possible to get the certs out of ACM for general usage.
but for inside of AWS with their services, it's pretty ok.
@nergdron yeah I wish they made that more obvious. (to me I already know what ACM's target use is)
given that certificates are practically free now, it's nice that companies are starting to go toward "we keep the keys secure, if you need to move off this product it's somewhat trivial to get a new cert"
@iliana yeah. it's such an important infrastructure piece, and I love that certbot has commodified it so that the big companies can't afford to not do the same.