Skip to content

Add --ca-bundle and AWS_CA_BUNDLE support#1834

Open
yerzhan7 wants to merge 3 commits into
awslabs:mainfrom
yerzhan7:tls-ca-bundle
Open

Add --ca-bundle and AWS_CA_BUNDLE support#1834
yerzhan7 wants to merge 3 commits into
awslabs:mainfrom
yerzhan7:tls-ca-bundle

Conversation

@yerzhan7
Copy link
Copy Markdown
Contributor

Description

Issue: #1480

Add --ca-bundle and AWS_CA_BUNDLE support (similarly to AWS CLI) as per https://docs.aws.amazon.com/sdkref/latest/guide/feature-gen-config.html

  • Allows customers to specify the path to a custom certificate bundle (a file with a .pem extension) to use when establishing SSL/TLS connections.
  • This overrides OS default trust store.
  • Used when constructing S3 Client and Credential Client
  • Same precedence as in AWS CLI (flag > env variable)
  • No support for ca_bundle from AWS config file (maybe added later as non-breaking change if there is usecase)

Does this change impact existing behavior?

No - new opt-in feature/flag.

Does this change need a changelog entry? Does it require a version change?

Yes - done.


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and I agree to the terms of the Developer Certificate of Origin (DCO).

Signed-off-by: Yerzhan Mazhkenov <20302932+yerzhan7@users.noreply.github.com>
@yerzhan7 yerzhan7 temporarily deployed to PR integration tests May 18, 2026 09:24 — with GitHub Actions Inactive
Signed-off-by: Yerzhan Mazhkenov <20302932+yerzhan7@users.noreply.github.com>
@yerzhan7 yerzhan7 requested a deployment to PR integration tests May 18, 2026 09:42 — with GitHub Actions Waiting
@yerzhan7 yerzhan7 requested a deployment to PR integration tests May 18, 2026 09:48 — with GitHub Actions Waiting
Signed-off-by: Yerzhan Mazhkenov <20302932+yerzhan7@users.noreply.github.com>
@yerzhan7 yerzhan7 deployed to PR integration tests May 18, 2026 09:54 — with GitHub Actions Active
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant