참고 - https://github.com/aws/aws-cli/issues/2690

https://unix.stackexchange.com/questions/567633/ssl-validation-fails-after-applying-suse-sle-module-public-cloud-12-2020-251

https://www.amazontrust.com/repository/AmazonRootCA1.pem

AWS CLI SSL 인증서 오류
원인: AWS CLI가 프록시 인증서를 신뢰하지 않는다. 즉, 사용자의 프록시 인증서가 자체 서명되고 회사가 인증 기관(CA)으로 설정된 것과 같은 요인으로 인해 AWS CLI가 프록시의 인증서를 신뢰하지 않기 때문에 발생

해결

export PUBLICIP=$(curl http://169.254.169.254/latest/meta-data/public-ipv4 2> /dev/null)
echo "Public IP: $PUBLICIP"
export INSTANCEID=`curl 169.254.169.254/latest/meta-data/instance-id 2> /dev/null`
echo "Instance ID: $INSTANCEID"
export EC2_AVAIL_ZONE=`curl -s http://169.254.169.254/latest/meta-data/placement/availability-zone`
echo "Availability Zone: $EC2_AVAIL_ZONE"
export EC2_REGION="`echo \"$EC2_AVAIL_ZONE\" | sed -e 's:\([0-9][0-9]*\)[a-z]*\$:\\1:'`"
echo "Region: $EC2_REGION"

Try just hitting the server

echo curl https://ec2.${EC2_REGION}.amazonaws.com/ --verbose
curl https://ec2.${EC2_REGION}.amazonaws.com/ --verbose

---

2 번째 방법(누락 됬을 경우(인증서))

sudo update-ca-trust force-enable
sudo update-ca-trust extract
ls -la /etc/pki/tls/certs

"force-enable" 명령은 해당 파일을 다시 만듭니다

---

3 ca-bundle.crt File 확인 -> Success 뜨면 성공

Error Message: SSL validation failed for https://s3.amazonaws.com/ [Errno 2] No such file or directory
curl https://ec2.ap-northeast-2.amazonaws.com/ --verbose

---

4 환경 변수 설정(https://gist.github.com/nmarchini/6c03f083176f4424817aa725b6c9ac3a#file-gistfile1-txt-L12)

[default]
region = ap-northeast-2
output = json
ca_bundle = path/to/ca-cert/cacert.pem