Inject Custom CA into al2 runtime

Question

Hello Team,

I am writing a lambda function with al2 runtime layers including PowerShell and AWS Tools. The Lambda is connected to a VPC and I need to add custom CA as traffic is getting intercepted in firewalls for SSLDecrypt. The certificate store paths are readonly and I am unable to inject custom CA. Is there a way to add custom CA into the runtime?

Thank You 
Abdul

Accepted Answer

I was able to get around the problem by creating an additional layer with the root CA and adding the environment variable SSL_CERT_FILE with value pointing to the certificate file which gets mounted to /opt as part of the certificate layer.

Inject Custom CA into al2 runtime

Conteúdo relevante