How you can Repair TLS Certificates Deployment Through CloudFormation | by Teri Radichel | Cloud Safety | Jul, 2023



ACM.248 This course of wants some love ❤️

A part of my sequence on Automating Cybersecurity Metrics. DNS. Additionally Deploying a Static Web site. The Code.

I’ve been writing about TLS certificates deployment. Yesterday’s subject was Certificates Transparency logs and the information they could expose.

I began writing the subsequent submit on deployment of an S3 bucket however I inadvertently redeployed my TLS certificates and bought some errors. And sadly, that’s the reason you aren’t getting a submit about creating an S3 bucket for a static web site simply but.

After inadvertently deploying the stack, every thing bought right into a wonky state because of the approach this entire course of works. I spent approach too lengthy diving into the errors I used to be getting and find out how to repair them. So now you get this submit. As a result of that pointless lack of time is definitely resolved with a number of modifications to the TLS certificates validation course of.

You may learn the prior posts to get the gist of the issues.

As a result of I might sense these issues earlier than even ever making an attempt to do that — it’s one thing I’ve by no means totally automated earlier than. And also you in all probability know by now I’m an enormous advocate of automation. However that is only a home of playing cards. Perhaps there’s a higher option to do it — but when so the CloudFormation documentation shouldn’t be making that tremendous clear.