I have an existing domain
example.de, that should be served via AWS CloudFront and its SSL certificates provided by ACM. That domain is registered and managed at a third-party registrar.
Setting up CloudFront and ACM for the
www.example.de domain was easy enough, but what do I do for the apex record
example.de? I cannot go the "canonical route" of either moving the domain to Route53 (because then, e-mail would break) or using ALIAS records (because the registrar does not support them).
What I plan to do for now is getting an EC2 micro instance with a fixed Elastic IP, point the apex record to that IP and have a nginx running that redirects all requests to the
www domain - but how do I get the ACM SSL certificate on that EC2 instance?