AMAZON CLOUDFRONT MTLS WITH OPEN-SOURCE SERVERLESS CA

Summary from the TLDR InfoSec newsletter

AWS added support for CloudFront to use mTLS to require client certificates in requests at re:Invent 2025. This article walks through setting up CloudFront to use mTLS via an open-source serverless CA that the author developed. AWS should offer a standardized Trust Store, possibly in ACM, rather than having all services that support mTLS implement it separately.