Connectors and Connections

Back Next

Secure communication in a serverless runtime environment

When you use the serverless runtime environment, you can configure TLS authentication and establish one-way or two-way secure communication with the REST API.

Ensure that the certificates are in the

.jks

format.

To configure a secure REST V2 connection using the serverless runtime environment, complete the following prerequisite tasks to add the TLS certificates to the serverless runtime location:

Create the following structure for the serverless agent configuration in AWS:

<Supplementary file location>/serverless_agent_config

For one-way secure communication, add the truststore certificates and for the two-way secure communication, add the truststore and keystore certificates in the Amazon S3 bucket in the following location in your AWS account:

<Supplementary file location>/serverless_agent_config/SSL

Copy the following code snippet to a text editor:

version: 1
agent:
  agentAutoApply:
    general:
      sslStore:
        - fileCopy:
            sourcePath: SSL/<RESTV2_trustStore_cert_name>.jks
        - fileCopy:            
            sourcePath: SSL/<RESTV2_keyStore_cert_name>.jks

where the source path is the directory of the certificate files in AWS.

Ensure that the syntax and indentations are valid, and then save the file as

serverlessUserAgentConfig.yml

in the following AWS location:

<Supplementary file location>/serverless_agent_config

When the .yml file runs, the SSL certificates are copied from the AWS location to the serverless agent directory.

In the REST V2 connection properties, specify the following certificate path in the serverless agent directory in the

TrustStore File Path

and

KeyStore File Path

fields:

/home/cldagnt/SystemAgent/serverless/configurations/ssl_store/<cert_name>.jks