Package software.amazon.awscdk.services.acmpca
AWS::ACMPCA Construct Library
---
AWS CDK v1 has reached End-of-Support on 2023-06-01. This package is no longer being updated, and users should migrate to AWS CDK v2.
For more information on how to migrate, see the Migrating to AWS CDK v2 guide.
This module is part of the AWS Cloud Development Kit project.
import software.amazon.awscdk.services.acmpca.*;
Certificate Authority
This package contains a CertificateAuthority class.
At the moment, you cannot create new Authorities using it,
but you can import existing ones using the fromCertificateAuthorityArn static method:
ICertificateAuthority certificateAuthority = CertificateAuthority.fromCertificateAuthorityArn(this, "CA", "arn:aws:acm-pca:us-east-1:123456789012:certificate-authority/023077d8-2bfa-4eb0-8f22-05c96deade77");
Low-level Cfn* classes
You can always use the low-level classes
(starting with Cfn*) to create resources like the Certificate Authority:
CfnCertificateAuthority cfnCertificateAuthority = CfnCertificateAuthority.Builder.create(this, "CA")
.type("ROOT")
.keyAlgorithm("RSA_2048")
.signingAlgorithm("SHA256WITHRSA")
.subject(SubjectProperty.builder()
.country("US")
.organization("string")
.organizationalUnit("string")
.distinguishedNameQualifier("string")
.state("string")
.commonName("123")
.serialNumber("string")
.locality("string")
.title("string")
.surname("string")
.givenName("string")
.initials("DG")
.pseudonym("string")
.generationQualifier("DBG")
.build())
.build();
If you need to pass the higher-level ICertificateAuthority somewhere,
you can get it from the lower-level CfnCertificateAuthority using the same fromCertificateAuthorityArn method:
Deprecated: AWS CDK v1 has reached End-of-Support on 2023-06-01. This package is no longer being updated, and users should migrate to AWS CDK v2. For more information on how to migrate, see https://docs.aws.amazon.com/cdk/v2/guide/migrating-v2.htmlCfnCertificateAuthority cfnCertificateAuthority; ICertificateAuthority certificateAuthority = CertificateAuthority.fromCertificateAuthorityArn(this, "CertificateAuthority", cfnCertificateAuthority.getAttrArn());
-
ClassDescriptionDefines a Certificate for ACMPCA.A CloudFormation
AWS::ACMPCA::Certificate.Contains X.509 certificate information to be placed in an issued certificate.A builder forCfnCertificate.ApiPassthroughPropertyAn implementation forCfnCertificate.ApiPassthroughPropertyA fluent builder forCfnCertificate.Defines the X.500 relative distinguished name (RDN).A builder forCfnCertificate.CustomAttributePropertyAn implementation forCfnCertificate.CustomAttributePropertySpecifies the X.509 extension information for a certificate.A builder forCfnCertificate.CustomExtensionPropertyAn implementation forCfnCertificate.CustomExtensionPropertyDescribes an Electronic Data Interchange (EDI) entity as described in as defined in Subject Alternative Name in RFC 5280.A builder forCfnCertificate.EdiPartyNamePropertyAn implementation forCfnCertificate.EdiPartyNamePropertySpecifies additional purposes for which the certified public key may be used other than basic purposes indicated in theKeyUsageextension.A builder forCfnCertificate.ExtendedKeyUsagePropertyAn implementation forCfnCertificate.ExtendedKeyUsagePropertyContains X.509 extension information for a certificate.A builder forCfnCertificate.ExtensionsPropertyAn implementation forCfnCertificate.ExtensionsPropertyDescribes an ASN.1 X.400GeneralNameas defined in RFC 5280 .A builder forCfnCertificate.GeneralNamePropertyAn implementation forCfnCertificate.GeneralNamePropertyDefines one or more purposes for which the key contained in the certificate can be used.A builder forCfnCertificate.KeyUsagePropertyAn implementation forCfnCertificate.KeyUsagePropertyDefines a custom ASN.1 X.400GeneralNameusing an object identifier (OID) and value.A builder forCfnCertificate.OtherNamePropertyAn implementation forCfnCertificate.OtherNamePropertyDefines the X.509CertificatePoliciesextension.A builder forCfnCertificate.PolicyInformationPropertyAn implementation forCfnCertificate.PolicyInformationPropertyModifies theCertPolicyIdof aPolicyInformationobject with a qualifier.A builder forCfnCertificate.PolicyQualifierInfoPropertyAn implementation forCfnCertificate.PolicyQualifierInfoPropertyDefines aPolicyInformationqualifier.A builder forCfnCertificate.QualifierPropertyAn implementation forCfnCertificate.QualifierPropertyContains information about the certificate subject.A builder forCfnCertificate.SubjectPropertyAn implementation forCfnCertificate.SubjectPropertyLength of time for which the certificate issued by your private certificate authority (CA), or by the private CA itself, is valid in days, months, or years.A builder forCfnCertificate.ValidityPropertyAn implementation forCfnCertificate.ValidityPropertyA CloudFormationAWS::ACMPCA::CertificateAuthority.Provides access information used by theauthorityInfoAccessandsubjectInfoAccessextensions described in RFC 5280 .A builder forCfnCertificateAuthority.AccessDescriptionPropertyAn implementation forCfnCertificateAuthority.AccessDescriptionPropertyDescribes the type and format of extension access.A builder forCfnCertificateAuthority.AccessMethodPropertyAn implementation forCfnCertificateAuthority.AccessMethodPropertyA fluent builder forCfnCertificateAuthority.Contains configuration information for a certificate revocation list (CRL).A builder forCfnCertificateAuthority.CrlConfigurationPropertyAn implementation forCfnCertificateAuthority.CrlConfigurationPropertyDescribes the certificate extensions to be added to the certificate signing request (CSR).A builder forCfnCertificateAuthority.CsrExtensionsPropertyAn implementation forCfnCertificateAuthority.CsrExtensionsPropertyDefines the X.500 relative distinguished name (RDN).A builder forCfnCertificateAuthority.CustomAttributePropertyAn implementation forCfnCertificateAuthority.CustomAttributePropertyDescribes an Electronic Data Interchange (EDI) entity as described in as defined in Subject Alternative Name in RFC 5280.A builder forCfnCertificateAuthority.EdiPartyNamePropertyAn implementation forCfnCertificateAuthority.EdiPartyNamePropertyDescribes an ASN.1 X.400GeneralNameas defined in RFC 5280 .A builder forCfnCertificateAuthority.GeneralNamePropertyAn implementation forCfnCertificateAuthority.GeneralNamePropertyDefines one or more purposes for which the key contained in the certificate can be used.A builder forCfnCertificateAuthority.KeyUsagePropertyAn implementation forCfnCertificateAuthority.KeyUsagePropertyContains information to enable and configure Online Certificate Status Protocol (OCSP) for validating certificate revocation status.A builder forCfnCertificateAuthority.OcspConfigurationPropertyAn implementation forCfnCertificateAuthority.OcspConfigurationPropertyDefines a custom ASN.1 X.400GeneralNameusing an object identifier (OID) and value.A builder forCfnCertificateAuthority.OtherNamePropertyAn implementation forCfnCertificateAuthority.OtherNamePropertyCertificate revocation information used by the CreateCertificateAuthority and UpdateCertificateAuthority actions.A builder forCfnCertificateAuthority.RevocationConfigurationPropertyAn implementation forCfnCertificateAuthority.RevocationConfigurationPropertyASN1 subject for the certificate authority.A builder forCfnCertificateAuthority.SubjectPropertyAn implementation forCfnCertificateAuthority.SubjectPropertyA CloudFormationAWS::ACMPCA::CertificateAuthorityActivation.A fluent builder forCfnCertificateAuthorityActivation.Properties for defining aCfnCertificateAuthorityActivation.A builder forCfnCertificateAuthorityActivationPropsAn implementation forCfnCertificateAuthorityActivationPropsProperties for defining aCfnCertificateAuthority.A builder forCfnCertificateAuthorityPropsAn implementation forCfnCertificateAuthorityPropsProperties for defining aCfnCertificate.A builder forCfnCertificatePropsAn implementation forCfnCertificatePropsA CloudFormationAWS::ACMPCA::Permission.A fluent builder forCfnPermission.Properties for defining aCfnPermission.A builder forCfnPermissionPropsAn implementation forCfnPermissionPropsInterface which all CertificateAuthority based class must implement.Internal default implementation forICertificateAuthority.A proxy class which represents a concrete javascript instance of this type.