aws-cloudformation-ecs-certificates

Senzing Demo Certificates

Spikes

spike-certificate-with-ec2

spike-certificate-with-node

1. Approach:
   1. Create an AWS Lambda written in Node.js.
2. Spike status:
   1. Failed
   2. Although Node.js crypto can create public/private keys, it cannot generate a full X509 certificate.
3. References:
   1. Node.js crypto
   2. using node-forge

spike-certificate-certificate-manager

1. Approach:
   1. Use AWS::CertificateManager::Certificate.
2. Spike status:
   1. Failed
   2. Requires a domain name hosted by AWS.

spike certificate-self-signed

1. Approach:
   1. Spike uses Parameters: to input a X509 certificate and private key. Defaults are provided.
2. Spike status:
   1. Works, but not the function needed.
   2. Certificate is passed in as a parameter; needs to be generate by Cloudformation template.

spike-certificate-create.py

1. Approach:
   1. In python script, create an X509 certificate using OpenSSL.crypto
2. Spike status:
   1. Although python works, the python cannot easily be made into an AWS lambda because of the OpenSSL library.

spike-certificate-with-python

1. Approach:
   1. Create an AWS Lambda written in python.
2. Spike status:
   1. Stalled on requirement for OpenSSL package being publicly available