letsencrypt-aws

letsencrypt-aws is a background service that automates SSL certificate management for AWS infrastructure. It continuously monitors Elastic Load Balancers (ELBs) and automatically renews expiring certificates through Let's Encrypt, eliminating manual certificate management overhead.

Key Features

• Automatic Renewal — Runs daily checks and renews certificates expiring within 45 days
• AWS Integration — Uses AWS APIs to manage ELBs, IAM certificates, and Route53 DNS records
• DNS Challenge Validation — Creates Route53 records to complete Let's Encrypt domain validation
• Secure Key Handling — Generates private keys in memory and uploads directly to IAM without disk storage
• Docker Support — Available as a pre-built Docker image for easy deployment
• Persistent Operation — Can run continuously with 24-hour sleep cycles between checks

Philosophy

letsencrypt-aws follows a "set and forget" philosophy, designed to run autonomously in the background while maintaining security best practices for certificate management.