Jeremy Cooper [AFS MBP] 4524a12bc6 Updates tags for tfsec/checkov Ignore comments %!s(int64=3) %!d(string=hai) anos
..
README.md 4243b68544 Combines Subordinate CAs into One Module %!s(int64=4) %!d(string=hai) anos
terragrunt.hcl 4524a12bc6 Updates tags for tfsec/checkov Ignore comments %!s(int64=3) %!d(string=hai) anos

README.md

Subordinate CA

The subordinate CA certificate exists in the common services account, so why is it here?

Two reasons: 1) Because it has to be signed by the root CA, and any such use of the root CA generates alerts and needs to be done cautiously and with great justification. 2) The common services provider profile is already available everywhere