AWS lightsail documentation change
Summary
Restructured the document to consolidate Lightsail and Bitnami WordPress instructions, removed duplicate content, improved heading hierarchy, and fixed broken links.
Security assessment
The changes focus on documentation organization and clarity improvements. No security vulnerabilities or weaknesses are addressed. The HTTPS setup instructions remain fundamentally unchanged, with only minor link fixes (e.g., corrected anchor link for SSL/TLS certificate information). Removed content was redundant between Lightsail and Bitnami sections rather than security-critical.
Diff
diff --git a/lightsail/latest/userguide/amazon-lightsail-enabling-https-on-wordpress.md b/lightsail/latest/userguide/amazon-lightsail-enabling-https-on-wordpress.md index 018575b13..57328c98a 100644 --- a//lightsail/latest/userguide/amazon-lightsail-enabling-https-on-wordpress.md +++ b//lightsail/latest/userguide/amazon-lightsail-enabling-https-on-wordpress.md @@ -7,57 +7 @@ -# Secure your WordPress site with HTTPS on Lightsail - -You can configure your WordPress instance by using a guided, step-by-step workflow that will configure the following: - - * A registered domain name – Your WordPress site needs a domain name that is easy to remember. Users will specify this domain name to access your WordPress site. For more information, see [Register and manage domains for your website in Lightsail](./amazon-lightsail-domain-registration.html). - - * DNS management – You must decide how to manage the DNS records for your domain. A DNS record tells the DNS server which IP address or hostname a domain or subdomain is associated with. A DNS zone contains the DNS records for your domain. For more information, see [Understanding DNS in Lightsail](./understanding-dns-in-amazon-lightsail.html). - - * A Static IP address – The default public IP address for your WordPress instance changes if you stop and start your instance. When you attach a static IP address to your instance, it stays the same even if you stop and start your instance. For more information, see [View and manage IP addresses for Lightsail resources](./understanding-public-ip-and-private-ip-addresses-in-amazon-lightsail.html). - - * An SSL/TLS certificate – After you create a validated certificate and install it on your instance, you can enable HTTPS for your WordPress website so that traffic that is routed to the instance through your registered domain is encrypted using HTTPS. For more information, see Secure your WordPress site with HTTPS on Lightsail. - - - - -###### Tip - -Review the following tips before you begin. For troubleshooting information, see [Troubleshooting WordPress setup](./amazon-lightsail-troubleshooting-wp-setup.html). - - * Your instance must be in a **Running** state. Allow a few minutes for the SSH connection to become ready if the instance was just started. - - * Ports 22, 80, and 443 on your instance firewall must allow TCP connections from any IP address while setup is running. For more information, see [Instance firewalls](./understanding-firewall-and-port-mappings-in-amazon-lightsail.html). - - * When you add or update DNS records that point traffic from your apex domain (`example.com`) and its `www` subdomains (`www.example.com`), they will need to propagate throughout the Internet. You can verify that your DNS changes have taken effect by using tools such as [nslookup](https://aws.amazon.com/blogs//messaging-and-targeting/how-to-check-your-domain-verification-settings/), or [DNS Lookup](https://mxtoolbox.com/DnsLookup.aspx) from _MxToolbox_. - - * Let's Encrypt certificates will automatically renew every 60 to 90 days. - - * While setup is in progress, do not stop or make changes to your instance. It can take up to 15 minutes to configure your instance. You can view the progress for each step in the instance connect tab. - - - - -###### To configure your instance using the website setup wizard - - 1. On the instance management page, on the **Connect** tab, choose **Set up your website**. - - - - 2. For **Specify a domain name** , use an existing Lightsail managed domain, register a new domain with Lightsail, or use a domain that you registered by using another domain registrar. Choose **Use this domain** to go to the next step. - - 3. For **Configure DNS** , do one of the following: - - * Choose **Lightsail managed domain** to use a Lightsail DNS zone. Choose **Use this DNS zone** to go to the next step. - - * Choose **Third-party domain** to use the hosting service that manages the DNS records for your domain. Note that we create a matching DNS zone in your Lightsail account in case you decide to use it later on. Choose **Use third-party DNS** to go to the next step. - - 4. For **Create a static IP address** , enter a name for your static IP address and then choose **Create static IP**. - - 5. For **Manage domain assignments** , choose **Add assignment** , choose a domain type, and then choose **Add**. Choose **Continue** to go to the next step. - - 6. For **Create an SSL/TLS certificate** , choose your domains and subdomains, enter an email address, select **I authorize Lightsail to configure a Let's Encrypt certificate on my instance** , and choose **Create certificate**. We start to configure the Lightsail resources. - -While setup is in progress, do not stop or make changes to your instance. It can take up to 15 minutes to configure your instance. You can view the progress for each step in the instance connect tab. - - 7. After the website setup is complete, verify that the URLs that you specified in the domain assignments step open your WordPress site. - - +Step 1: Configure your WordPress instanceStep 2: Get the admin password for your WordPress websiteStep 3: Sign in to the administration dashboard of your WordPress website @@ -64,0 +9 @@ While setup is in progress, do not stop or make changes to your instance. It can +# Secure your WordPress site with HTTPS on Lightsail @@ -68,10 +13 @@ Enabling Hypertext Transfer Protocol Secure (HTTPS) for your WordPress website a -Here are a few steps you should take to setup SSL certificates after your WordPress instance is up and running on Amazon Lightsail. Before you get started, identify your blueprint vendor on your instance management page: - - - -Select the appropriate guide for your WordPress instance: - -Lightsail - - -###### Step 1: Configure your WordPress instance +## Step 1: Configure your WordPress instance @@ -87 +23 @@ You can configure your WordPress instance by using a guided, step-by-step workfl - * An SSL/TLS certificate – After you create a validated certificate and install it on your instance, you can enable HTTPS for your WordPress website so that traffic that is routed to the instance through your registered domain is encrypted using HTTPS. For more information, see Secure your WordPress site with HTTPS on Lightsail. + * An SSL/TLS certificate – After you create a validated certificate and install it on your instance, you can enable HTTPS for your WordPress website so that traffic that is routed to the instance through your registered domain is encrypted using HTTPS. For more information, see [Secure your WordPress site with HTTPS on Lightsail](./amazon-lightsail-enabling-https-on-wordpress.html). @@ -136 +72 @@ While setup is in progress, do not stop or make changes to your instance. It can -###### Step 2: Get the admin password for your WordPress website +## Step 2: Get the admin password for your WordPress website @@ -159,127 +95 @@ The default password to sign in to the administration dashboard of your WordPres -###### Step 3: Sign in to the administration dashboard of your WordPress website - -Now that you have the password for the administration dashboard of your WordPress website, you can sign in. In the administration dashboard, you can change your user password, install plugins, change the theme of your website, and more. - -Complete the following steps to sign in to the administration dashboard of your WordPress website. - -###### To sign in to the administration dashboard - - 1. Open the instance management page for your WordPress instance. - - 2. On the **WordPress** panel, choose **Access WordPress Admin**. - - 3. On the **Access your WordPress Admin Dashboard** panel, under **Use public IP address** , choose the link with this format: - -http://`public-ipv4-address`./wp-admin - - 4. For **Username or Email Address** , enter `user`. - - 5. For **Password** , enter the password obtained in the previous step. - - 6. Choose **Log in**. - - - -You are now signed in to the administration dashboard of your WordPress website where you can perform administrative actions. For more information about administering your WordPress website, see the [WordPress Codex](https://codex.wordpress.org/) in the WordPress documentation. - - - - - - -Bitnami - - -###### Step 1: Configure your WordPress instance - -You can configure your WordPress instance by using a guided, step-by-step workflow that will configure the following: - - * A registered domain name – Your WordPress site needs a domain name that is easy to remember. Users will specify this domain name to access your WordPress site. For more information, see [Register and manage domains for your website in Lightsail](./amazon-lightsail-domain-registration.html). - - * DNS management – You must decide how to manage the DNS records for your domain. A DNS record tells the DNS server which IP address or hostname a domain or subdomain is associated with. A DNS zone contains the DNS records for your domain. For more information, see [Understanding DNS in Lightsail](./understanding-dns-in-amazon-lightsail.html). - - * A Static IP address – The default public IP address for your WordPress instance changes if you stop and start your instance. When you attach a static IP address to your instance, it stays the same even if you stop and start your instance. For more information, see [View and manage IP addresses for Lightsail resources](./understanding-public-ip-and-private-ip-addresses-in-amazon-lightsail.html). - - * An SSL/TLS certificate – After you create a validated certificate and install it on your instance, you can enable HTTPS for your WordPress website so that traffic that is routed to the instance through your registered domain is encrypted using HTTPS. For more information, see Secure your WordPress site with HTTPS on Lightsail. - - - - -###### Tip - -Review the following tips before you begin. For troubleshooting information, see [Troubleshooting WordPress setup](./amazon-lightsail-troubleshooting-wp-setup.html). - - * Setup supports Lightsail instances with WordPress version 6 and newer, that were created after January 1, 2023. - - * The Certbot dependency file, HTTPS rewrite script and certificate renewal script that are run during setup are saved in the `/opt/bitnami/lightsail/scripts/` directory on your instance. - - * Your instance must be in a **Running** state. Allow a few minutes for the SSH connection to become ready if the instance was just started. - - * Ports 22, 80, and 443 on your instance firewall must allow TCP connections from any IP address while setup is running. For more information, see [Instance firewalls](./understanding-firewall-and-port-mappings-in-amazon-lightsail.html). - - * When you add or update DNS records that point traffic from your apex domain (`example.com`) and its `www` subdomains (`www.example.com`), they will need to propagate throughout the Internet. You can verify that your DNS changes have taken effect by using tools such as [nslookup](https://aws.amazon.com/blogs//messaging-and-targeting/how-to-check-your-domain-verification-settings/), or [DNS Lookup](https://mxtoolbox.com/DnsLookup.aspx) from _MxToolbox_. - - * Wordpress instances that were created prior to January 1, 2023, might contain a deprecated Certbot Personal Package Archive (PPA) repository that will cause website setup to fail. If this repository is present during setup, it will be removed from the existing path and backed up to the following location on your instance: `~/opt/bitnami/lightsail/repo.backup`. For more information about the deprecated PPA, see [Certbot PPA](https://launchpad.net/~certbot/+archive/ubuntu/certbot) on the _Canonical_ website. - - * Let's Encrypt certificates will automatically renew every 60 to 90 days. - - * While setup is in progress, do not stop or make changes to your instance. It can take up to 15 minutes to configure your instance. You can view the progress for each step in the instance connect tab. - - - - -###### To configure your instance using the website setup wizard - - 1. On the instance management page, on the **Connect** tab, choose **Set up your website**. - - - - 2. For **Specify a domain name** , use an existing Lightsail managed domain, register a new domain with Lightsail, or use a domain that you registered by using another domain registrar. Choose **Use this domain** to go to the next step. - - 3. For **Configure DNS** , do one of the following: - - * Choose **Lightsail managed domain** to use a Lightsail DNS zone. Choose **Use this DNS zone** to go to the next step. - - * Choose **Third-party domain** to use the hosting service that manages the DNS records for your domain. Note that we create a matching DNS zone in your Lightsail account in case you decide to use it later on. Choose **Use third-party DNS** to go to the next step. - - 4. For **Create a static IP address** , enter a name for your static IP address and then choose **Create static IP**. - - 5. For **Manage domain assignments** , choose **Add assignment** , choose a domain type, and then choose **Add**. Choose **Continue** to go to the next step. - - 6. For **Create an SSL/TLS certificate** , choose your domains and subdomains, enter an email address, select **I authorize Lightsail to configure a Let's Encrypt certificate on my instance** , and choose **Create certificate**. We start to configure the Lightsail resources. - -While setup is in progress, do not stop or make changes to your instance. It can take up to 15 minutes to configure your instance. You can view the progress for each step in the instance connect tab. - - 7. After the website setup is complete, verify that the URLs that you specified in the domain assignments step open your WordPress site. - - - - -###### Note - -If your blueprint does not support the guided workflow, you can use `bncert` to create your SSL certificates.For more information about using `bncert` to enable HTTPS, see [ Secure your WordPress site with HTTPS on Lightsail with bncert](./amazon-lightsail-enabling-https-on-wordpress-with-bncert.html). - -###### Step 2: Get the admin password for your WordPress website - -The default password to sign in to the administration dashboard of your WordPress website is stored on the instance. Complete the following steps to get the password. - -###### To get the default password for the WordPress administrator - - 1. Open the instance management page for your WordPress instance. - - 2. On the **WordPress** panel, choose **Retrieve default password**. This expands **Access default password** at the bottom of the page. - - - - 3. Choose **Launch CloudShell**. This opens a panel at the bottom of the page.