Configuring HTTPS

If you do not have the Yandex Cloud CLI installed yet, install and initialize it.

By default, the CLI uses the folder specified when creating the profile. To change the default folder, use the yc config set folder-id <folder_ID> command. You can also set a different folder for any specific command using the --folder-name or --folder-id parameter.

1. See the description of the CLI command for editing a bucket ACL:

   yc storage bucket update --help
   

2. Run this command:

   yc storage bucket set-https --name <bucket_name> --certificate-id <certificate_ID> 
   

   Where:

   • --name: Name of the bucket to configure HTTPS for.
   • --certificate-id: Certificate ID in Certificate Manager.

   Result:

   source_type: SOURCE_TYPE_MANAGED_BY_CERTIFICATE_MANAGER
   certificate_id: fpqe2g0hfr0e********
   

With Terraform, you can quickly create a cloud infrastructure in Yandex Cloud and manage it using configuration files. These files store the infrastructure description written in HashiCorp Configuration Language (HCL). If you change the configuration files, Terraform automatically detects which part of your configuration is already deployed, and what should be added or removed.

Terraform is distributed under the Business Source License. The Yandex Cloud provider for Terraform is distributed under the MPL-2.0 license.

For more information about the provider resources, see the relevant documentation on the Terraform website or its mirror.

If you do not have Terraform yet, install it and configure the Yandex Cloud provider.

To select a certificate from Certificate Manager:

1. Open the Terraform configuration file and add the https section to the bucket description:

   ...
   resource "yandex_storage_bucket" "b" {
     bucket = "my-policy-bucket"
   
     https {
       certificate_id = "<certificate_ID>"
     }
   }
   ...
   

   Where:

   • certificate_id: Certificate ID in Certificate Manager that will be used for the bucket.

   For more information about the yandex_storage_bucket resource parameters in Terraform, see this TF provider article.

2. Check the configuration using this command:

   terraform validate
   

   If the configuration is correct, you will get this message:

   Success! The configuration is valid.
   

3. Run this command:

   terraform plan
   

   You will see a detailed list of resources. No changes will be made at this step. If the configuration contains any errors, Terraform will show them.

4. Apply the changes:

   terraform apply
   

5. Confirm the changes: type yes into the terminal and press Enter.

   You can check the selected certificate using the management console.

To select a certificate from Certificate Manager, use the setHTTPSConfig REST API method for the Bucket resource or the BucketService/SetHTTPSConfig gRPC API call.

To upload a custom security certificate, use the setHTTPSConfig REST API method for the Bucket resource or the BucketService/SetHTTPSConfig gRPC API call.