Activating ACM Private Certificate Authority - AWS Virtual Workshop

Protecting data in transit with TLS relies on using X.509 certificates to verify machine identity. In this hands on workshop, we will show you how to build CA hierarchies and generate private certificates for use on load balancers terminating TLS. We will also provide labs on certificate monitoring mechanisms; enabling in-transit encryption for your Kubernetes workloads at multiple TLS termination points - at ingress controller and at the pod level; and using certs for IOT devices and customizing certificates using custom templates.
Learning Objectives:
* Objective 1: Learn how to build a PKI infrastructure on AWS.
* Objective 2: Build and use private certificates for terminating TLS on AWS services, Kubernetes and IOT devices.
* Objective 3: Customizing certificates for purposes such as code signing and email certificates.
***To learn more about the services featured in this talk, please visit: aws.amazon.com/products/security Subscribe to AWS Online Tech Talks On AWS:
www.youtube.com/@AWSOnlineTec...
Follow Amazon Web Services:
Official Website: aws.amazon.com/what-is-aws
Twitch: / aws
Twitter: / awsdevelopers
Facebook: / amazonwebservices
Instagram: / amazonwebservices
☁️ AWS Online Tech Talks cover a wide range of topics and expertise levels through technical deep dives, demos, customer examples, and live Q&A with AWS experts. Builders can choose from bite-sized 15-minute sessions, insightful fireside chats, immersive virtual workshops, interactive office hours, or watch on-demand tech talks at your own pace. Join us to fuel your learning journey with AWS.
#AWS

[@srirajan1933]

Great work on this workshop, Anthony, Zach, and Ram! Nice perspective and detailed explanations on each step. Very helpful to see the Private CA creation, issuance, installation, and usage process. Thank you!

[@wunderlust7252]

I get the error you must have a fully-qualified domain name, a supported signature, and a supported key size. when i use the load balancer on ECS Fargate container.

[@archprof4943]

When I try to login to the dashboard, I am being asked to login using my account or other. I received an OTP over email and got verified successfully. But I don't have an event hash to login, as it redirects me to fill in the hash. How do I get the hash?

[@wunderlust7252]

Filed I keep getting "The signing certificate for the CA you specified in the request has expired." My root and subordinate have a validity of 10yrs and 1 yr respectively.

[@wunderlust7252]

Solved this by increasing the Validy to 2 yrs in the surbodinate

[@YoMateo.]

Claim your "here within an hour" ticket here 👀’