Configuring HTTPS

If you do not have the Yandex Cloud CLI yet, install and initialize it.

The folder specified when creating the CLI profile is used by default. To change the default folder, use the yc config set folder-id <folder_ID> command. You can specify a different folder using the --folder-name or --folder-id parameter.

1. See the description of the CLI command for editing a bucket ACL:

   yc storage bucket update --help
   

2. Run this command:

   yc storage bucket set-https --name <bucket_name> --certificate-id <certificate_ID> 
   

   Where:

   • --name: Name of the bucket to configure HTTPS for.
   • --certificate-id: Certificate ID in Certificate Manager.

   Result:

   source_type: SOURCE_TYPE_MANAGED_BY_CERTIFICATE_MANAGER
   certificate_id: fpqe2g0hfr0e********
   

With Terraform, you can quickly create a cloud infrastructure in Yandex Cloud and manage it using configuration files. These files store the infrastructure description written in HashiCorp Configuration Language (HCL). If you change the configuration files, Terraform automatically detects which part of your configuration is already deployed, and what should be added or removed.

Terraform is distributed under the Business Source License. The Yandex Cloud provider for Terraform is distributed under the MPL-2.0 license.

For more information about the provider resources, see the documentation on the Terraform website or mirror website.

If you do not have Terraform yet, install it and configure its Yandex Cloud provider.

To select a certificate from Certificate Manager:

1. Open the Terraform configuration file and add the https section to the bucket description:

   ...
   resource "yandex_storage_bucket" "b" {
     bucket = "my-policy-bucket"
   
     https {
       certificate_id = "<certificate_ID>"
     }
   }
   ...
   

   Where:

   • certificate_id: Certificate ID in Certificate Manager that will be used for the bucket.

   For more information about the yandex_storage_bucket resource parameters in Terraform, see this TF provider article.

2. Check the configuration using this command:

   terraform validate
   

   If the configuration is correct, you will get this message:

   Success! The configuration is valid.
   

3. Run this command:

   terraform plan
   

   The terminal will display a list of resources with their parameters. No changes will be made at this step. If the configuration contains any errors, Terraform will point them out.

4. Apply the configuration changes:

   terraform apply
   

5. Confirm the changes: type yes into the terminal and press Enter.

   You can check the selected certificate using the management console.

To select a certificate from Certificate Manager, use the setHTTPSConfig REST API method for the Bucket resource or the BucketService/SetHTTPSConfig gRPC API call.

To upload a custom security certificate, use the setHTTPSConfig REST API method for the Bucket resource or the BucketService/SetHTTPSConfig gRPC API call.