AWS::ACMPCA::CertificateAuthorityActivation - AWS CloudFormation

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::ACMPCA::CertificateAuthorityActivation

The AWS::ACMPCA::CertificateAuthorityActivation resource creates and installs a CA certificate on a CA. If no status is specified, the AWS::ACMPCA::CertificateAuthorityActivation resource status defaults to ACTIVE. Once the CA has a CA certificate installed, you can use the resource to toggle the CA status field between ACTIVE and DISABLED.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{ "Type" : "AWS::ACMPCA::CertificateAuthorityActivation", "Properties" : { "Certificate" : String, "CertificateAuthorityArn" : String, "CertificateChain" : String, "Status" : String } }

YAML

Type: AWS::ACMPCA::CertificateAuthorityActivation Properties: Certificate: String CertificateAuthorityArn: String CertificateChain: String Status: String

Properties

Certificate

The Base64 PEM-encoded certificate authority certificate.

Required: Yes

Type: String

Update requires: No interruption

CertificateAuthorityArn

The Amazon Resource Name (ARN) of your private CA.

Required: Yes

Type: String

Update requires: Replacement

CertificateChain

The Base64 PEM-encoded certificate chain that chains up to the root CA certificate that you used to sign your private CA certificate.

Required: No

Type: String

Update requires: No interruption

Status

Status of your private CA.

Required: No

Type: String

Update requires: No interruption

Return values

Ref

The Amazon Resource Name (ARN) of the certificate authority.

Fn::GetAtt

The Fn::GetAtt intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the Fn::GetAtt intrinsic function, see Fn::GetAtt.

CompleteCertificateChain

The complete Base64 PEM-encoded certificate chain, including the certificate authority certificate.