vault-aws-cf | AWS Cloudformation Template for standing up a reference | AWS library
kandi X-RAY | vault-aws-cf Summary
kandi X-RAY | vault-aws-cf Summary
This repository contains code for building Amazon Machine Images (AMI) and a generic Cloudformation template. The AMI and template can be used to spin up a production-ready Vault cluster.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of vault-aws-cf
vault-aws-cf Key Features
vault-aws-cf Examples and Code Snippets
Community Discussions
Trending Discussions on vault-aws-cf
QUESTION
I used this repo https://github.com/scarolan/vault-aws-cf to generate a HashiCorp Vault and HashiCorp Consul cluster for secrets management. During the setup, it was required that the vault AMI's needed certificates, in this case a fullchain.pem
and privkey.pem
What is their purpose in this setup? I generated a managed certificate for https on Amazon Web Services but want to understand the AMI server requirements for the certificates.
...ANSWER
Answered 2020-Sep-21 at 15:08those certs are used for your https listeners, for example here.
The AWS certificates you generated through AWS ACM wont work since they are managed by AWS.
You could generated AWS certs through ACM, but you'd need access to the private key as well, for example https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-export-private.html . That means that AWS wont be able to rotate your certs and you need to do it by hand.
You could also place your Vault behind an ALB and attach the certificates you generated in the first place in that ALB. This means that your SSL is terminated at the Load balancer level and the traffic between your ALB and Vault is going to be unencrypted.
QUESTION
I am following this guide which provides packer templates to create AMI's https://github.com/scarolan/vault-aws-cf
The problem is that I'm new to packer and seeing the following error:
...ANSWER
Answered 2020-Sep-09 at 10:24From the vault.json i can see that Packer-S3-Access
is a user defined input which is then used as the iam_instance_profile in packer.
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install vault-aws-cf
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page