# Elastic Serverless Forwarder for AWS SSL Authentication?

**URL:** <https://discuss.elastic.co/t/elastic-serverless-forwarder-for-aws-ssl-authentication/340576>\
**Category:** Logstash\
**Tags:** elastic-stack-security\
**Created:** [August 10, 2023, 2:50pm UTC](https://discuss.elastic.co/t/elastic-serverless-forwarder-for-aws-ssl-authentication/340576 "2023-08-10T14:50:04Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![stabbotco1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stabbotco1/32/124293_2.png) [@stabbotco1](https://discuss.elastic.co/u/stabbotco1)\
**Post date:** [August 10, 2023, 2:50pm UTC](https://discuss.elastic.co/t/elastic-serverless-forwarder-for-aws-ssl-authentication/340576/1 "2023-08-10T14:50:04Z")

</div>

Hi All,  
we are looking to use the Elastic Serverless Forwarder for AWS, sending to logstash.  
We've got the initial setup and working, and are wondering if there is support for ssl authentication when sending data to logstash. Our need is to have ssl authentication, and if it is not supported for ESF, what would be the most common approach ot meet this need?

Thank you!

---

<div class="post-metadata">

**Author:** ![Soucy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/soucy/32/119756_2.png) [@Soucy](https://discuss.elastic.co/u/Soucy)\
**Post date:** [August 29, 2023, 8:09pm UTC](https://discuss.elastic.co/t/elastic-serverless-forwarder-for-aws-ssl-authentication/340576/2 "2023-08-29T20:09:52Z")

</div>

Hi @stabbotco1. Disclaimer: I have not done this myself, but it looks like it may be possible. The config file for ESF has [this optional setting](https://www.elastic.co/guide/en/esf/current/aws-deploy-elastic-serverless-forwarder.html#sample-s3-config-file:~:text=Default%20value%3A%201-,args.ssl_assert_fingerprint,-%3A%20(Optional)%20SSL%20fingerprint):

- `args.ssl_assert_fingerprint`: (Optional) SSL fingerprint for self-signed SSL certificate on HTTPS transport.

Logstash can be [configured for SSL via its config file](https://www.elastic.co/guide/en/beats/filebeat/current/configuring-ssl-logstash.html#:~:text=Configure%20Logstash%20to%20use%20SSL).

---

<div class="post-metadata">

**Author:** ![stabbotco1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stabbotco1/32/124293_2.png) [@stabbotco1](https://discuss.elastic.co/u/stabbotco1)\
**Post date:** [August 30, 2023, 11:09pm UTC](https://discuss.elastic.co/t/elastic-serverless-forwarder-for-aws-ssl-authentication/340576/3 "2023-08-30T23:09:46Z")

</div>

Hi Jeremy @Soucy, thank you for your time and effort to research a solution. I appreciate it very much!  
I saw the setting, but have since confirmed to my satisfaction that ESF does not support mutual TLS (mTLS). This is unfortunate as our requirements require this, and failure to support mTLS has resulted in us moving closer to a 'build your own' solution which requires more effort, components, complexity and failure opportunities.

I am honestly surprised at this, and expected mTLS to be supported by ESF.

Thank you again, and have a great day!

Steve

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 27, 2023, 11:10pm UTC](https://discuss.elastic.co/t/elastic-serverless-forwarder-for-aws-ssl-authentication/340576/4 "2023-09-27T23:10:39Z")

</div>

Closed on September 27, 2023, 11:10pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.