I’m now developing IoT platform on AWS in serverless architecture.
For the security reasons, I want to add client-side ssl certificate authentication for all the https connections.
I’m thinking of creating a server that can do client-side ssl certificate authorization, and
host single Page Application files there, then build custom cognito proxy program so that
every http(s) connections goes throught that server with client-side auth.
The biggest problem of this idea is that this architecture requires a server…
What do you think is the best way to do this?