Step by step for IAM Roles Anywhere with your own CA (using openssl) + Cloudformation, CDK Example

I struggled a bit getting IAM Roles to work with a CA I created with openssl and also to deploy all resources with CDK (or cloudformation) After I figured out everything I wrote this blog, I hope someone will find it useful:

check it out: https://medium.com/cyberark-engineering/calling-aws-services-from-your-on-premises-servers-using-iam-roles-anywhere-3e335ed648be

The CDK example uses escape hatches (so CfnResources), so they could easily be used to do CloudFormation