awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #4596 from Infisical/ENG-3798

Browse Source 
Add PKI sync AWS Certificate Manager
This commit is contained in:
carlosmonastyrski
2025-10-06 17:46:11 -03:00
committed by GitHub
parent d2e818c5a5 83807d1815
commit b9525f101a
46 changed files with 1415 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files

78
docs/integrations/app-connections/aws.mdx
View File

@@ -177,6 +177,45 @@ Infisical supports two methods for connecting to AWS.
</Accordion>
</AccordionGroup>
</Tab>
<Tab title="PKI Sync">
<AccordionGroup>
<Accordion title="AWS Certificate Manager">
Use the following custom policy to grant the minimum permissions required by Infisical to sync certificates to AWS Certificate Manager:
```json
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCertificateManagerAccess",
"Effect": "Allow",
"Action": [
"acm:ListCertificates",
"acm:DescribeCertificate",
"acm:GetCertificate",
"acm:ImportCertificate",
"acm:ExportCertificate",
"acm:DeleteCertificate",
"acm:AddTagsToCertificate",
"acm:RemoveTagsFromCertificate",
"acm:ListTagsForCertificate"
],
"Resource": "*"
}
]
}
```
<Note>
- **ListCertificates**: Lists all certificates in the account
- **ImportCertificate**: Imports certificates from Infisical into AWS Certificate Manager
- **ExportCertificate**: Exports certificates for synchronization
- **DeleteCertificate**: Removes certificates that are no longer managed by Infisical
- **DescribeCertificate** and **GetCertificate**: Retrieves certificate details for comparison during sync
- Tag-related permissions: Manages certificate tags for identification and organization
</Note>
</Accordion>
</AccordionGroup>
</Tab>
</Tabs>
</Step>
@@ -354,6 +393,45 @@ Infisical supports two methods for connecting to AWS.
</Accordion>
</AccordionGroup>
</Tab>
<Tab title="PKI Sync">
<AccordionGroup>
<Accordion title="AWS Certificate Manager">
Use the following custom policy to grant the minimum permissions required by Infisical to sync certificates to AWS Certificate Manager:
```json
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCertificateManagerAccess",
"Effect": "Allow",
"Action": [
"acm:ListCertificates",
"acm:DescribeCertificate",
"acm:GetCertificate",
"acm:ImportCertificate",
"acm:ExportCertificate",
"acm:DeleteCertificate",
"acm:AddTagsToCertificate",
"acm:RemoveTagsFromCertificate",
"acm:ListTagsForCertificate"
],
"Resource": "*"
}
]
}
```
<Note>
- **ListCertificates**: Lists all certificates in the account
- **ImportCertificate**: Imports certificates from Infisical into AWS Certificate Manager
- **ExportCertificate**: Exports certificates for synchronization
- **DeleteCertificate**: Removes certificates that are no longer managed by Infisical
- **DescribeCertificate** and **GetCertificate**: Retrieves certificate details for comparison during sync
- Tag-related permissions: Manages certificate tags for identification and organization
</Note>
</Accordion>
</AccordionGroup>
</Tab>
</Tabs>
</Step>
<Step title="Obtain Access Key ID and Secret Access Key">