Security News
tea.xyz Spam Plagues npm and RubyGems Package Registries
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
@trautonen/cdk-dns-validated-certificate
Advanced tools
Readme
CDK does not have a built in construct to manage cross-region or cross-account DNS validated certificates. There's an attempt to work around the issue with a cross region references option for stacks, but it has a lot of issues and still does not solve the cross-account use case.
This construct solves these problems by managing the certificate as a custom resource and with direct API calls to ACM and Route53. In the future it will be possible to support not only Route53, but other DNS services too.
// hosted zone managed by the CDK application
const hostedZone: route53.IHostedZone = ...
// no separate validation role is needed
const certificate = new DnsValidatedCertificate(this, 'CrossRegionCertificate', {
hostedZone: hostedZone,
domainName: 'example.com', // must be compatible with the hosted zone
certificateRegion: 'us-east-1' // used by for example CloudFront
})
// external hosted zone
const hostedZone: route53.IHostedZone = route53.HostedZone.fromHostedZoneAttributes(this, 'HostedZone', {
hostedZoneId: 'Z532DGDEDFS123456789',
zoneName: 'example.com',
})
// validation role on the same account as the hosted zone
const roleArn = 'arn:aws:iam::123456789:role/ChangeDnsRecordsRole'
const externalId = 'domain-assume'
const validationRole: iam.IRole = iam.Role.fromRoleArn(this, 'ValidationRole', roleArn)
const certificate = new DnsValidatedCertificate(this, 'CrossAccountCertificate', {
hostedZone: hostedZone,
domainName: 'example.com',
validationRole: validationRole,
validationExternalId: externalId,
})
// example.com is validated on same account against managed hosted zone
// and secondary.com is validated against external hosted zone on other account
const hostedZoneForMain: route53.IHostedZone = ...
const hostedZoneForAlternative: route53.IHostedZone =
route53.HostedZone.fromHostedZoneAttributes(this, 'SecondaryHostedZone', {
hostedZoneId: 'Z532DGDEDFS123456789',
zoneName: 'secondary.com'
})
const certificate = new DnsValidatedCertificate(this, 'CrossAccountCertificate', {
domainName: 'example.com',
alternativeDomainNames: ['secondary.com'],
validationHostedZones: [{
hostedZone: hostedZoneForMain
},{
hostedZone: hostedZoneForAlternative,
validationRole: iam.Role.fromRoleArn(
this, 'SecondaryValidationRole', 'arn:aws:iam::123456789:role/ChangeDnsRecordsRole'
),
validationExternalId: 'domain-assume'
}]
})
FAQs
CDK certificate construct that supports cross-region and cross-account DNS validation
The npm package @trautonen/cdk-dns-validated-certificate receives a total of 506 weekly downloads. As such, @trautonen/cdk-dns-validated-certificate popularity was classified as not popular.
We found that @trautonen/cdk-dns-validated-certificate demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
Security News
As cyber threats become more autonomous, AI-powered defenses are crucial for businesses to stay ahead of attackers who can exploit software vulnerabilities at scale.
Security News
UnitedHealth Group disclosed that the ransomware attack on Change Healthcare compromised protected health information for millions in the U.S., with estimated costs to the company expected to reach $1 billion.