CODEWITHSUNDEEP
pythonpython-3.xamazon-web-servicesaws-lambdassl-certificate
Punter Vicky
Punter Vicky

Reputation: 17032

Python AWS Lambda Certificates

How do I add an additional CA (certificate authority) to the trust store used by my Python3 AWS Lambda function?

Upvotes: 13

Views: 22342

Answers (1)

carlin.scott
carlin.scott

Reputation: 7335

If you only need a single CA, then get your crt file and encode it into a pem using the following command in linux:

openssl x509 -text -in "{your CA}.crt" > cacert.pem

If you need to add CA's to the default CA bundle, then copy python3.8/site-packages/certifi/cacert.pem to your lambda folder. Then run this command for each crt:

openssl x509 -text -in "{your CA}.crt" >> cacert.pem

After creating the pem file, deploy your lambda with the REQUESTS_CA_BUNDLE environment variable set to /var/task/cacert.pem.

/var/task is where AWS Lambda extracts your zipped up code to.

Upvotes: 9

Related Questions