Closed timcosgrove closed 1 year ago
Two sets of keys were created using openssl genrsa -out private.key 2048 && openssl rsa -in private.key -pubout > public.key
These have been stored in AWS SSM at these locations, and then removed from my local machine:
/cms/prod/drupal_api_users/next_build_api/public.key
/cms/prod/drupal_api_users/next_build_api/private.key
/cms/staging/drupal_api_users/next_build_api/public.key
/cms/staging/drupal_api_users/next_build_api/private.key
Requirements
We want public/private keys created for Oauth authentication and stored in SSM, so that our keys are stored correctly and can be used by our various CMS Preview setups.
Background & implementation details
Per Next Drupal documentation, Oauth public/private key pairs can be generated by a machine with openssl installed: https://next-drupal.org/learn/preview-mode/create-oauth-client#4-generate-keys
Once created, these keys should be stored in AWS SSM. The naming of the keys is to be discussed.
Once stored, the engineer who created the keys should destroy them on their local machine, so that they are only stored on AWS and nowhere else.