Step by step for IAM Roles Anywhere with your own CA (using openssl) + Cloudformation, CDK Example

Question

I struggled a bit getting IAM Roles to work with a CA I created with openssl 
and also to deploy all resources with CDK (or cloudformation)
After I figured out everything I wrote this blog, I hope someone will find it useful:

check it out:
https://medium.com/cyberark-engineering/calling-aws-services-from-your-on-premises-servers-using-iam-roles-anywhere-3e335ed648be

The CDK example uses escape hatches (so CfnResources), so they could easily be used to do CloudFormation

Accepted Answer

check it out: https://medium.com/cyberark-engineering/calling-aws-services-from-your-on-premises-servers-using-iam-roles-anywhere-3e335ed648be

Step by step for IAM Roles Anywhere with your own CA (using openssl) + Cloudformation, CDK Example

Relevant questions

Using an Intermediate CA with IAM Roles Anywhere

IAM users/roles/groups policies reports

how can i quickly troubleshoot IAM permission for a service

Identify in-built or default IAM Roles

Using IAM Roles within AWS WorkSpaces (Windows)

IAM roles rightsizing

IAM Permission Boundary does not prevent CDK escalating privilege access?