IdentityServer4 在 AWS 共享 X509 证书

Question

I have IdentityServer4 endpoint as AWS Lambda and I need to share signing/validation certificate between lambda instances.

This is a current workarnound:

        var identityServer = services.AddIdentityServer(options => {});

        if (env.IsDevelopment())
        {
            identityServer.AddDeveloperSigningCredential();
        }
        else
        {
            identityServer.AddSigningCredential(GetIdentityServerCertificate(Configuration));

and

    private static X509Certificate2 GetIdentityServerCertificate(
        IConfiguration configuration
    )
    {
        var pfxSecret = System.Environment.GetEnvironmentVariable("CERT_PRIVATE");

        var pfxBytes = Convert.FromBase64String(pfxSecret);
        var certificate = new X509Certificate2(pfxBytes);
        return certificate;
    }

Does AWS have any product suitable for storing certificates?

Thanks!

Answer 1

You can store private key of a certificate in AWS Secrets Manager . Here you can find some additional inforamtion how to use AWS Secrets Manager for storing certificates.