Unable to configure mutual TLS configuration of Custom domain names configuration of API Gateway.

0

I'm unable to configure mutual TLS in "Custom domain names" option of API Gateway.

Below are steps I have followed to configure mutual TLS configuration: I have a root account and its child account.

Root Account Steps:

  1. Created a new client certificate using "client certificates" option of API gateway in root account.
  2. Downloaded the new certificate. the new certificate file name is qde1ca.cert. Renamed the qde1ca.cert file using mv qde1ca.cert gateway.truststore.pem.
  3. uploaded gateway.truststore.pem file to a directory application-truststore of S3 bucket of Root Account. The S3 bucket name is integrations-us-east-1. The directory has version enabled. So, my S3 file path is s3://integrations-us-east-1/application-truststore/gateway.truststore.pem
  4. Noted Object URI and Version ID of the newly uploaded gateway.truststore.pem file.

Child Account Steps

  1. In child account, I tried to configure mutual TLS of Custom domain name of API Gateway.

    • enabled Mutual TLS authentication option
    • Configure Truststore URI as the Object URI (s3://integrations-us-east-1/application-truststore/gateway.truststore.pem)
    • Truststore version as Version ID of the newly uploaded gateway.truststore.pem file.
  2. Saved this configuration.

When I test using Frontend that invoke APIs of API gateway, it seems that the APIs are not executing. However, when I reset the mutual TLS configuration using OLD values Object URI and Version ID, The APIs in API Gateway works correctly!!!

What am I missing into the new mutual TLS configuration of Custom domain names configuration of API Gateway?

沒有答案

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南