Amazon Certificate Manager gives LimitExceededException

12
votes

I have a fresh AWS account with no certificates connected to it.

This is what it looks like when I try to request a certificate for a domain through the Amazon Certificate Manager:

Error message when requesting a certificate.[1]

Trying the aws acm request-certificate command from the command line gives me:

An error occurred (LimitExceededException) when calling the 
RequestCertificate operation: Cannot request more certificates in this account. 
Contact Customer Service for details

The documentation mention limits, but I have no certificates so I shouldn't have exceeded it.

enter image description here

Any ideas what the problem might be?

3
amazon-web-servicessslamazon-s3
I would open a case as suggested. Is this a new account? Did you specify > 10 domain names in the certificate? This limit is per certificate. - Rodrigo M
@RodrigoM I have opened a support case now, thought I would see if anyone else have had this problem. It's a new account (a couple of weeks) but S3 and Billing is working fine. I only requested one (naked) domain name. - Dag Heyman
Does aws acm list-certificates show anything? - Dusan Bajic
@DusanBajic it gives me { "CertificateSummaryList": [] } - Dag Heyman
Well, really looks like a case for AWS support, let us know what happened. - Dusan Bajic

3 Answers

9
votes

One thing that is not on most answers here. When you create an account and/or haven't used it much (the representative from aws' answer was unclear as to what constitutes a proper usage of the account in the beginning) your limit is actually 0.

So your choices here are request a limit increase or wait until it reaches some sort of adequate usage as required by AWS.

4
votes

This was solved by AWS support, not sure what the actual issue was.

2
votes

If certs don't show on "aws acm list-certificates", that's because of the regions thing, most likely. This is the result with my default region:

hannah@Hannah-PC:~$ aws acm list-certificates
{
    "CertificateSummaryList": []
}
hannah@Hannah-PC:~$ grep region .aws/config 
region = ap-southeast-2

This is the result when I change the region to us-east-1:

hannah@Hannah-PC:~$ aws acm list-certificates --region=us-east-1
{
    "CertificateSummaryList": [
        {
            "CertificateArn": "arn:aws:acm:us-east-1:31234512345:certificate/XXXXXX-XXXX-XXXX-XXXX-XXXXXX",
            "DomainName": "whatever.net"
        }
    ]
}

SSL certs have to in us-east-1 specifically for CloudFront to use them.