Jeremy Cooper [AFS MBP] 277c88dca3 Updates tfsec & checkov ignores + syntax updates 3 年之前
..
README.md 4243b68544 Combines Subordinate CAs into One Module 4 年之前
terragrunt.hcl 277c88dca3 Updates tfsec & checkov ignores + syntax updates 3 年之前

README.md

Subordinate CA

The subordinate CA certificate exists in the common services account, so why is it here?

Two reasons: 1) Because it has to be signed by the root CA, and any such use of the root CA generates alerts and needs to be done cautiously and with great justification. 2) The common services provider profile is already available everywhere