Home Explore Help
Register Sign In
AFS
/
xdr-terraform-live
2
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Tree: 2a6064b310
Branches Tags
xdr-terraform-l...
/
prod
/
aws-us-gov
/
mdr-prod-root-ca
/
012-subordinate-cas
Jeremy Cooper [AFS MBP] d8231ee65c Updates IMDS syntax & ECR encryption syntax | tfsec/chekov ignores 3 years ago
..
README.md 4243b68544 Combines Subordinate CAs into One Module 4 years ago
terragrunt.hcl d8231ee65c Updates IMDS syntax & ECR encryption syntax | tfsec/chekov ignores 3 years ago

README.md

Subordinate CA

The subordinate CA certificate exists in the common services account, so why is it here?

Two reasons: 1) Because it has to be signed by the root CA, and any such use of the root CA generates alerts and needs to be done cautiously and with great justification. 2) The common services provider profile is already available everywhere