ENFORCING DNS NAME CONSTRAINTS IN AWS PRIVATE CA

Summary from the TLDR InfoSec newsletter

A very thorough tutorial on the unintuitive process to enforce DNS name constraints in an AWS private CA. The post includes sample code and tests to verify the constraints.