Certificate Monitoring

Overview

RaaS uses a centralised certificate monitoring system (OPS-9290) to track TLS certificate expiry across all customer accounts.

Key Components

Component	Location
DynamoDB table	raas-cert-status (management account, us-west-2)
Dashboard	Cognito-protected web UI
SSM associations	Per-account cert check scripts
Deployment scripts	raas/raas-cert-monitoring/scripts/

For full technical details, see the Certificate Dashboard.

For detailed runbooks see the Knowledge Base:

• Generate Self-Signed Certificate
• Apply Custom Certificate
• Certificate Playbook — Tooling