Developers can now connect Salesforce to AWS services using certificate-based authentication instead of access keys. The guide details creating a self-signed certificate in Salesforce and setting up an AWS Private Certificate Authority. This approach leverages AWS IAM Roles Anywhere to grant on-premises systems temporary IAM role permissions.

The process involves issuing certificates via the AWS CLI and configuring a Trust Anchor in IAM Roles Anywhere. A Salesforce Named Credential is then established, initially pointing to AWS STS for temporary credential validation before switching to the target service. This method eliminates long-lived access keys, a common security vulnerability.

This integration pattern is valuable for organizations building hybrid cloud architectures. By using certificate-based authentication, teams can securely automate API callouts from Salesforce to AWS services like Amazon Connect. The final validation step confirms the setup by testing a direct API call, ensuring the connection functions as intended before production deployment.