I have a number of SSL certificates (*.mydomain.com, myotherdomain.com), currently when setting up new environments / products I am manually adding the SSL certificate to store on the new server and then binding it to the site.
I would like to do this programatically, therefore I need to have the SSL certificates available to my code. My question is, what is the best practise regarding hosting and accessing SSL certificates. They would be hosted in AWS, but I am concerned about how to securely access them from the application that will install them on the servers.
I am thinking creating an API that is authenticated against a key on the server hosting the SSL certificate is the way to go, but am just wondering if there is a better solution or if anyone else has accomplished something similar, perhaps accessing AWS Certificate Manager using their API?