Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

How to automate the creation and revocation of AWS Client VPN certificates?

0

I have an AWS Client VPN setup that uses mutual authentication with certificates.

Currently, I manually create client certificates using OpenVPN's easy-rsa utility. This process involves:

Generating a certificate and private key for the client. Signing the certificate with the Root CA used for my VPN.

I would like to automate this process. Here are some specifics:

I am using the easy-rsa utility to manage my Root CA and generate client certificates.

What scripts, tools, or AWS services can help automate this task? If possible, please provide example commands or scripts.

Topics
Networking & Content DeliverySecurity, Identity, & Compliance
Tags
AWS Client VPNAWS Certificate ManagerAmazon VPC
Language
English

asked 2 years ago190 views

1 Answer
0

If you can, use SSO with SAML2 to something like EntraID so you dont need to manage certificates and add moves and changes

EXPERT

answered 2 years ago

EXPERT

reviewed 2 years ago

  • Amara Vinay
    2 years ago

    Thanks for the suggestion. However, I don’t have AWS SSO set up in my account, and I need to continue using certificate-based authentication for AWS Client VPN.

    I’m looking to automate the creation and revocation of client certificates, which I currently do manually with easy-rsa. Any guidance on automating this process with AWS tools like Lambda or Secrets Manager would be appreciated.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content