In the needs of signing a intermediary Certificate Authority for Istio’s envoy mTLS, I have used OpenSSL and AWS CLI to achieve the task. Context: Assuming this ACM PCA infrastructure: Goal: Generate a CA CSR to be signed by CA of Account #2 to use as Istio’s mTLS CA. …