Does AWS AppFlow automatically trust AWS Private CA certs?

Question

Does AWS Infrastructure such as AppFlow automatically trust AWS Private CA certs?

[This ](https://aws.amazon.com/blogs/awsforsap/share-sap-odata-services-securely-through-aws-privatelink-and-the-amazon-appflow-sap-connector/) page seems to suggest that it does:

> The SAP instance must have a certificate installed for end-to-end TLS communication. You can use Amazon private CA for obtaining server certificates and installing them on the SAP system via transaction code STRUST. If you want to terminate the SSL at the load balancer, then you can skip this step and just forward the traffic to the target group on a port where SAP does not require a certificate for SSL communication.

Answer

AWS Private CA do not trust appflow automatically. you need to create Private certificate in AWS Private CA and then install the certifcate on the SAP system via transaction code STRUST. AWS gives options to export only private Certificate from the console.

https://docs.aws.amazon.com/acm/latest/userguide/export-private.html

Does AWS AppFlow automatically trust AWS Private CA certs?

相关内容