Update aws-ec2.html.md
clarify, and make more explicit, the language around the default AWS public certificate
This commit is contained in:
parent
1da55a151c
commit
5ef359ff6c
|
@ -242,10 +242,11 @@ endpoints.
|
||||||
|
|
||||||
### Varying Public Certificates
|
### Varying Public Certificates
|
||||||
|
|
||||||
The AWS public certificate which contains the public key used to verify the
|
The AWS public certificate, which contains the public key used to verify the
|
||||||
PKCS#7 signature varies for groups of regions. The default public certificate
|
PKCS#7 signature, varies for different AWS regions. The primary AWS public
|
||||||
provided with the backend is applicable for many regions. Instances whose PKCS#7
|
certificate, which covers most AWS regions, is already included in Vault and
|
||||||
signatures cannot be verified by the default public certificate, can register a
|
does not need to be added. Instances whose PKCS#7 signatures cannot be
|
||||||
|
verified by the default public certificate included in Vault, can register a
|
||||||
different public certificate which can be found [here]
|
different public certificate which can be found [here]
|
||||||
(http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-identity-documents.html),
|
(http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-identity-documents.html),
|
||||||
via the `auth/aws-ec2/config/certificate/<cert_name>` endpoint.
|
via the `auth/aws-ec2/config/certificate/<cert_name>` endpoint.
|
||||||
|
|
Loading…
Reference in New Issue