Skip to content

Commit 60f7429

Browse files
chore: notice for aws/aws-cdk#8607 (#22)
Adding a notice for IAM/EKS OIDC Issue where the OIDC provider currently is retrieving short lived leaf certificates instead of root certificates which have a longer expiration date.
1 parent 56e6748 commit 60f7429

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

data/notices.json

+16
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,21 @@
11
{
22
"notices": [
3+
{
4+
"title": "aws-iam: IAM OIDC provider configures the wrong certificate thumbprint",
5+
"issueNumber": 8607,
6+
"overview": "Your application is using the iam.OpenIDConnectProvider resource, which currently configures the thumbprint of the leaf certificate instead of the root. Since leaf certificates are rotated more frequently, you are in danger of application errors next time those certificates get rotated. See the attached issue for mitigation steps and apply them as soon as possible.",
7+
"components": [
8+
{
9+
"name": "aws-cdk-lib.aws_iam.OpenIdConnectProvider",
10+
"version": "^2.0.0"
11+
},
12+
{
13+
"name": "@aws-cdk/aws-iam.OpenIdConnectProvider",
14+
"version": "^1.0.0"
15+
}
16+
],
17+
"schemaVersion": "1"
18+
},
319
{
420
"title": "apigateway: Unable to serialize value as aws-cdk-lib.aws_apigateway.IModel",
521
"issueNumber": 21902,

0 commit comments

Comments
 (0)