Jeremy Cooper [AFS MBP] d8231ee65c Updates IMDS syntax & ECR encryption syntax | tfsec/chekov ignores %!s(int64=3) %!d(string=hai) anos
..
README.md 4243b68544 Combines Subordinate CAs into One Module %!s(int64=4) %!d(string=hai) anos
terragrunt.hcl d8231ee65c Updates IMDS syntax & ECR encryption syntax | tfsec/chekov ignores %!s(int64=3) %!d(string=hai) anos

README.md

Subordinate CA

The subordinate CA certificate exists in the common services account, so why is it here?

Two reasons: 1) Because it has to be signed by the root CA, and any such use of the root CA generates alerts and needs to be done cautiously and with great justification. 2) The common services provider profile is already available everywhere