Deploy an ML Workspace with Support for TLS on ECS
On ECS, you can provision an ML workspace with TLS enabled, so that the workspace is
accessible via https.
You need to obtain a certificate from the Certificate Authority used by your
organization. This may be an internal certificate authority. Additionally, you need a
computer with CLI access to the cluster, and with kubectl
installed.
Provision an ML workspace. See Provision an ML Workspace for more
information.
Obtain the .crt and .key files for the
certificate from your Certificate Authority.
The certificate URL is generally of the form:
<workspaceid>.<cluster>.<domain>.com.
Assuming an example URL for the certificate of
ml-30b43418-53c.apps.cluster.yourcompany.com, check that
the certificate correctly shows the corresponding Common Name (CN) and Subject
Alternative Names (SAN):