Route53 DNS-01 Across AWS Accounts

Netflix / lemur

Repository for the Lemur Certificate Manager

Apache License 2.0

1.73k stars 322 forks source link

Route53 DNS-01 Across AWS Accounts #4928

Closed ccben87 closed 3 months ago

ccben87 commented 3 months ago

Hi, is it possible to configure Lemur to create Route53 DNS records in an AWS account different from the account where the Lemur EC2 instance is running from? If so, could you please advise how this is possible? There does not seem to be anything to configure apart from account ID.

ccben87 commented 3 months ago

My mistake, this does work. I just had my policy wrong.

For anyone else that might need it, you can even do an AssumeRoleWithWebIdentity if you specify an environment variable for AWS_WEB_IDENTITY_TOKEN_FILE.