# Providing mTLS Identities to Lambdas

DevFeed: [Providing mTLS Identities to Lambdas](<https://devfeed.tech/articles/providing-mtls-identities-to-lambdas-15811.md>)

Original publisher: [Read original article](<https://developer.squareup.com/blog/providing-mtls-identities-to-lambdas>)

Author: Michael Weissbacher

Published: 2020-08-25T19:00:00Z

Content type: article

Language: en

Sources: [Square Corner Blog RSS Feed](<https://devfeed.tech/sources/square-corner-blog-rss-feed.md>)

Topics: [AWS Lambda](<https://devfeed.tech/topics/aws-lambda.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [SPIFFE](<https://devfeed.tech/topics/spiffe.md>), [SPIRE](<https://devfeed.tech/topics/spire.md>), [Security](<https://devfeed.tech/topics/security.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [datacenter](<https://devfeed.tech/topics/datacenter.md>), [Microservice](<https://devfeed.tech/topics/microservice.md>), [Serverless](<https://devfeed.tech/topics/serverless.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>)

Tags: [audit-trail](<https://devfeed.tech/tags/audit-trail.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [aws-lambda](<https://devfeed.tech/tags/aws-lambda.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [identity](<https://devfeed.tech/tags/identity.md>), [microservices](<https://devfeed.tech/tags/microservices.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [serverless](<https://devfeed.tech/tags/serverless.md>), [spiffe](<https://devfeed.tech/tags/spiffe.md>), [spire](<https://devfeed.tech/tags/spire.md>), [tls](<https://devfeed.tech/tags/tls.md>)

## AI overview

Square describes a system that gives AWS Lambda applications short-lived, SPIFFE-compatible certificates for authenticated calls to microservices in its data centers. The design uses mutual TLS, AWS Private Certificate Authority, Secrets Manager, IAM policies, and advance certificate issuance to preserve security while keeping Lambda cold starts low.

## Source excerpt

Securing severless communication with our data centers