Build a CCA Attestation Service on AWS with Veraison
Introduction
Overview
Prepare AWS Account
Create the Domain and Certificate
Create the Veraison Deployment
Add CCA Platform Endorsements to Veraison
Use Veraison Service for CCA Attestation
Next Steps

  Log an issue

  Fork and edit

  Discuss on Discord

Prepare your AWS account

You’ll need an active AWS account for this Learning Path. If you don’t have one yet, refer to the AWS documentation .

Note

This Learning Path assumes that you have administrator-level privileges for your AWS account.

Install AWS command-line tools

You’ll need the AWS Command-Line Interface (CLI) installed for this section. Follow the AWS documentation to install the latest version.

Set up authentication

You’ll need to set up your local environment to authenticate with AWS before deploying Veraison.

The recommended method is Single Sign-On (SSO). Follow the steps in Veraison’s documentation here .

To confirm authentication is configured correctly, run a simple command, such as:

    

        
        
aws ec2 describe-availability-zones

You should see output similar to the following (depending on which AWS region you are using):

    

        
        {
    "AvailabilityZones": [
        {
            "OptInStatus": "opt-in-not-required",
            "Messages": [],
            "RegionName": "eu-west-1",
            "ZoneName": "eu-west-1a",
            "ZoneId": "euw1-az1",
            "GroupName": "eu-west-1-zg-1",
            "NetworkBorderGroup": "eu-west-1",
            "ZoneType": "availability-zone",
            "State": "available"
        },
        {
            "OptInStatus": "opt-in-not-required",
            "Messages": [],
            "RegionName": "eu-west-1",
            "ZoneName": "eu-west-1b",
            "ZoneId": "euw1-az2",
            "GroupName": "eu-west-1-zg-1",
            "NetworkBorderGroup": "eu-west-1",
            "ZoneType": "availability-zone",
            "State": "available"
        },
        {
            "OptInStatus": "opt-in-not-required",
            "Messages": [],
            "RegionName": "eu-west-1",
            "ZoneName": "eu-west-1c",
            "ZoneId": "euw1-az3",
            "GroupName": "eu-west-1-zg-1",
            "NetworkBorderGroup": "eu-west-1",
            "ZoneType": "availability-zone",
            "State": "available"
        }
    ]
}

If this operation fails, pause here and troubleshoot using the AWS documentation before continuing.

Back
Next