Internal microservices for a city’s tax stack must authenticate to each other with TLS certificates that are not public website certs. Which approach fits?
Select an answer to reveal the explanation.
Short Explanation
Public ACME certs are for the front door on the internet. Inside city microservices, a private CA issues the badges services trust among themselves. Private IP alone is not a substitute for TLS identity.
Full Explanation
Internal service-to-service TLS commonly relies on privately issued certificates from an organizational CA such as AWS Private Certificate Authority, not solely public ACME web certificates. Disabling TLS because traffic stays in a VPC removes defense-in-depth. Unmanaged self-signed sharing without proper trust and rotation is operationally fragile and insecure.