AWS LETSENCRYPT LAMBDA OR WHY I WROTE A CUSTOM TLS PROVIDER FOR AWS USING OPENTOFU AND GO

Summary from the TLDR InfoSec newsletter

This developer wrote a Lambda function that utilizes LetsEncrypt to create and renew TLS certificates that are more portable without relying on AWS Certificate Manager. The function takes in an event from a manual run or Event Bridge, requests a certificate from LetsEncrypt, creates a new TXT record in Route53 if needed for verification, and then optionally stores it in AWS Secrets Manager. The source code for the Lambda function and OpenTofu/Terraform module is provided.