“Which of the following statements is probably the reason why you are getting this error?
Before you can delete an SSL certificate you need to set up https on your server.
Before you can delete an SSL certificate, you need to set up the appropriate access level in IAM
Before you can delete an SSL certificate, you need to either rotate SSL certificates or revert from using a custom SSL certificate to using the default CloudFront certificate.
You can’t delete SSL certificates. You need to request it from AWS.
Explanations:
Deleting an SSL certificate does not require setting up HTTPS on your server. HTTPS is a protocol used for secure communication, and while an SSL certificate is necessary for HTTPS, it does not relate to the ability to delete the certificate itself.
While appropriate permissions are required to delete a certificate, the error message indicates that the certificate is in use by CloudFront, not a lack of IAM access. You would still need to disassociate the certificate from any services using it before deletion.
The error message states that the certificate is in use by CloudFront. To delete the certificate, you need to either rotate it with a new certificate or switch from using a custom certificate to the default CloudFront certificate. This ensures that there is no dependency on the certificate being deleted.
SSL certificates can be deleted by the user who has the necessary permissions. There is no requirement to request deletion from AWS; users can manage their own certificates within the IAM certificate store, provided they handle any dependencies appropriately.
If I’m correct, the answer is:
Before you can delete an SSL certificate, you need to either rotate SSL certificates or revert from using a custom SSL certificate to using the default CloudFront certificate.