aws / aws/aws-tools-for-powershell

Disable TLS Certificate Check

Open
#334 4 comments 1 reaction 0 assignees View on GitHub
cli-parity feature-request module/powershell-cmdlets p2 queued
Dominant language
C#
Stars
298
Forks
102
Avg merge
7d 17m
Merged PRs (30d)
2

Description

### Describe the feature

Issue previously reported and closed https://github.com/aws/aws-tools-for-powershell/issues/89

Would like to include a feature to disable TLS certificate verification when using custom endpoints for AWS services. My use case is to use Powershell Tools against Snowball Edge services.

### Use Case

I am attempting to use the AWS Tools for Powershell against AWS services running on Snowball edge. Some services such as IAM, EC2, STS etc. are enabled over both HTTP and HTTPS. The relevant powershell commands work against the HTTP endpoints, however my strong preference is to use HTTPS.

The new S3 Compatible service only offers HTTPS endpoints.

All HTTPS services on Snowball Edge are presented with the internally generated certificate [AWS Snowball Edge - Managing public key certificates](https://docs.aws.amazon.com/snowball/latest/developer-guide/snowball-edge-certificates-cli.html)

### Proposed Solution

Using the HTTPS endpoints with AWS CLI is possible by including the [--no-verify-ssl](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/index.html) parameter. Would it be possible to implement a similar common parameter in the AWS Tools for Powershell commands?

### Other Information

_No response_

### Acknowledgements

- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### AWS Tools for PowerShell version used

AWS Tools for PowerShell
Version 4.1.456
Copyright 2012-2023 Amazon.com, Inc. or its affiliates. All Rights Reserved.

Amazon Web Services SDK for .NET
Core Runtime Version 3.7.300.5
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.

### PowerShell version used

Name Value
---- -----
PSVersion 7.2.17
PSEdition Core
GitCommitId 7.2.17
OS Linux 6.4.16-linuxkit #1 SMP PREEMPT Thu Nov 16 10:49:20 UTC 2023
Platform Unix
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion 2.3
SerializationVersion 1.1.0.1
WSManStackVersion 3.0

### Operating System and version

Debian 11

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the previously closed issue #89 and the AWS CLI documentation for --no-verify-ssl, then trace how common endpoint and TLS settings are exposed across AWS Tools for PowerShell commands. Done means HTTPS custom endpoints can explicitly bypass certificate verification without affecting the default behavior; the payload names no repository files or tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, csharp, powershell
Domain
cli, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.