
Amazon CloudWatch Synthetics canaries can now validate authentication with self-signed certificates by injecting certificate details into the request interception code, enabling monitoring of applications using non-trusted certificate authorities.


<div><p>This article explains how to configure Amazon CloudWatch Synthetics canaries to validate authentication with self-signed certificates without modifying existing authentication processes.</p><ul><li>Create a Heartbeat monitoring canary using CloudWatch Synthetics blueprint</li><li>Download self-signed certificate from endpoint using OpenSSL commands</li><li>Edit canary script to import HTTPS package and add request interception</li><li>Inject certificate into request options to establish trust with self-signed endpoints</li><li>Replace placeholder with actual certificate content in canary code</li><li>Canary will pass once certificate is properly configured and injected</li><li>Consider using AWS Secrets Manager for production certificate storage best practices</li></ul><p>The guide provides step-by-step instructions to monitor applications using self-signed certificates by modifying canary source code to trust non-CA-signed certificates.</p></div>


Related articles