Script to add all Amazon AWS CAs to the local Ubuntu trust store

add-all-aws-ca.sh

certdir=/tmp/aws-certs
mkdir -p "${certdir}"

sudo mkdir -p /usr/local/share/ca-certificates/aws/

curl -sS "https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem" > ${certdir}/global-bundle.pem
awk 'split_after == 1 {n++;split_after=0} /-----END CERTIFICATE-----/ {split_after=1}{print > "aws-ca-" n+1 ".crt"}' < ${certdir}/global-bundle.pem

for cert in aws-ca-*; do
    sudo mv $cert /usr/local/share/ca-certificates/aws/
done

sudo update-ca-certificates