Package software.amazon.awscdk.services.acmpca
package software.amazon.awscdk.services.acmpca
AWS::ACMPCA Construct Library
This module is part of the AWS Cloud Development Kit project.
import software.amazon.awscdk.services.acmpca.*;
Certificate Authority
This package contains a CertificateAuthority class.
At the moment, you cannot create new Authorities using it,
but you can import existing ones using the fromCertificateAuthorityArn static method:
ICertificateAuthority certificateAuthority = CertificateAuthority.fromCertificateAuthorityArn(this, "CA", "arn:aws:acm-pca:us-east-1:123456789012:certificate-authority/023077d8-2bfa-4eb0-8f22-05c96deade77");
Low-level Cfn* classes
You can always use the low-level classes
(starting with Cfn*) to create resources like the Certificate Authority:
CfnCertificateAuthority cfnCertificateAuthority = CfnCertificateAuthority.Builder.create(this, "CA")
.type("ROOT")
.keyAlgorithm("RSA_2048")
.signingAlgorithm("SHA256WITHRSA")
.subject(SubjectProperty.builder()
.country("US")
.organization("string")
.organizationalUnit("string")
.distinguishedNameQualifier("string")
.state("string")
.commonName("123")
.serialNumber("string")
.locality("string")
.title("string")
.surname("string")
.givenName("string")
.initials("DG")
.pseudonym("string")
.generationQualifier("DBG")
.build())
.build();
If you need to pass the higher-level ICertificateAuthority somewhere,
you can get it from the lower-level CfnCertificateAuthority using the same fromCertificateAuthorityArn method:
CfnCertificateAuthority cfnCertificateAuthority; ICertificateAuthority certificateAuthority = CertificateAuthority.fromCertificateAuthorityArn(this, "CertificateAuthority", cfnCertificateAuthority.getAttrArn());
-
ClassDescriptionDefines a Certificate for ACMPCA.A reference to a CertificateAuthorityActivation resource.A builder for
CertificateAuthorityActivationReferenceAn implementation forCertificateAuthorityActivationReferenceA reference to a CertificateAuthority resource.A builder forCertificateAuthorityReferenceAn implementation forCertificateAuthorityReferenceA reference to a Certificate resource.A builder forCertificateReferenceAn implementation forCertificateReferenceTheAWS::ACMPCA::Certificateresource is used to issue a certificate using your private certificate authority.Contains X.509 certificate information to be placed in an issued certificate.A builder forCfnCertificate.ApiPassthroughPropertyAn implementation forCfnCertificate.ApiPassthroughPropertyA fluent builder forCfnCertificate.Defines the X.500 relative distinguished name (RDN).A builder forCfnCertificate.CustomAttributePropertyAn implementation forCfnCertificate.CustomAttributePropertySpecifies the X.509 extension information for a certificate.A builder forCfnCertificate.CustomExtensionPropertyAn implementation forCfnCertificate.CustomExtensionPropertyDescribes an Electronic Data Interchange (EDI) entity as described in as defined in Subject Alternative Name in RFC 5280.A builder forCfnCertificate.EdiPartyNamePropertyAn implementation forCfnCertificate.EdiPartyNamePropertySpecifies additional purposes for which the certified public key may be used other than basic purposes indicated in theKeyUsageextension.A builder forCfnCertificate.ExtendedKeyUsagePropertyAn implementation forCfnCertificate.ExtendedKeyUsagePropertyContains X.509 extension information for a certificate.A builder forCfnCertificate.ExtensionsPropertyAn implementation forCfnCertificate.ExtensionsPropertyDescribes an ASN.1 X.400GeneralNameas defined in RFC 5280 .A builder forCfnCertificate.GeneralNamePropertyAn implementation forCfnCertificate.GeneralNamePropertyDefines one or more purposes for which the key contained in the certificate can be used.A builder forCfnCertificate.KeyUsagePropertyAn implementation forCfnCertificate.KeyUsagePropertyDefines a custom ASN.1 X.400GeneralNameusing an object identifier (OID) and value.A builder forCfnCertificate.OtherNamePropertyAn implementation forCfnCertificate.OtherNamePropertyDefines the X.509CertificatePoliciesextension.A builder forCfnCertificate.PolicyInformationPropertyAn implementation forCfnCertificate.PolicyInformationPropertyModifies theCertPolicyIdof aPolicyInformationobject with a qualifier.A builder forCfnCertificate.PolicyQualifierInfoPropertyAn implementation forCfnCertificate.PolicyQualifierInfoPropertyDefines aPolicyInformationqualifier.A builder forCfnCertificate.QualifierPropertyAn implementation forCfnCertificate.QualifierPropertyContains information about the certificate subject.A builder forCfnCertificate.SubjectPropertyAn implementation forCfnCertificate.SubjectPropertyLength of time for which the certificate issued by your private certificate authority (CA), or by the private CA itself, is valid in days, months, or years.A builder forCfnCertificate.ValidityPropertyAn implementation forCfnCertificate.ValidityPropertyUse theAWS::ACMPCA::CertificateAuthorityresource to create a private CA.Provides access information used by theauthorityInfoAccessandsubjectInfoAccessextensions described in RFC 5280 .A builder forCfnCertificateAuthority.AccessDescriptionPropertyAn implementation forCfnCertificateAuthority.AccessDescriptionPropertyDescribes the type and format of extension access.A builder forCfnCertificateAuthority.AccessMethodPropertyAn implementation forCfnCertificateAuthority.AccessMethodPropertyA fluent builder forCfnCertificateAuthority.Contains configuration information for a certificate revocation list (CRL).A builder forCfnCertificateAuthority.CrlConfigurationPropertyAn implementation forCfnCertificateAuthority.CrlConfigurationPropertyContains configuration information for the default behavior of the CRL Distribution Point (CDP) extension in certificates issued by your CA.An implementation forCfnCertificateAuthority.CrlDistributionPointExtensionConfigurationPropertyDescribes the certificate extensions to be added to the certificate signing request (CSR).A builder forCfnCertificateAuthority.CsrExtensionsPropertyAn implementation forCfnCertificateAuthority.CsrExtensionsPropertyDefines the X.500 relative distinguished name (RDN).A builder forCfnCertificateAuthority.CustomAttributePropertyAn implementation forCfnCertificateAuthority.CustomAttributePropertyDescribes an Electronic Data Interchange (EDI) entity as described in as defined in Subject Alternative Name in RFC 5280.A builder forCfnCertificateAuthority.EdiPartyNamePropertyAn implementation forCfnCertificateAuthority.EdiPartyNamePropertyDescribes an ASN.1 X.400GeneralNameas defined in RFC 5280 .A builder forCfnCertificateAuthority.GeneralNamePropertyAn implementation forCfnCertificateAuthority.GeneralNamePropertyDefines one or more purposes for which the key contained in the certificate can be used.A builder forCfnCertificateAuthority.KeyUsagePropertyAn implementation forCfnCertificateAuthority.KeyUsagePropertyContains information to enable and configure Online Certificate Status Protocol (OCSP) for validating certificate revocation status.A builder forCfnCertificateAuthority.OcspConfigurationPropertyAn implementation forCfnCertificateAuthority.OcspConfigurationPropertyDefines a custom ASN.1 X.400GeneralNameusing an object identifier (OID) and value.A builder forCfnCertificateAuthority.OtherNamePropertyAn implementation forCfnCertificateAuthority.OtherNamePropertyCertificate revocation information used by the CreateCertificateAuthority and UpdateCertificateAuthority actions.A builder forCfnCertificateAuthority.RevocationConfigurationPropertyAn implementation forCfnCertificateAuthority.RevocationConfigurationPropertyASN1 subject for the certificate authority.A builder forCfnCertificateAuthority.SubjectPropertyAn implementation forCfnCertificateAuthority.SubjectPropertyTheAWS::ACMPCA::CertificateAuthorityActivationresource creates and installs a CA certificate on a CA.A fluent builder forCfnCertificateAuthorityActivation.Properties for defining aCfnCertificateAuthorityActivation.A builder forCfnCertificateAuthorityActivationPropsAn implementation forCfnCertificateAuthorityActivationPropsProperties for defining aCfnCertificateAuthority.A builder forCfnCertificateAuthorityPropsAn implementation forCfnCertificateAuthorityPropsProperties for defining aCfnCertificate.A builder forCfnCertificatePropsAn implementation forCfnCertificatePropsGrants permissions to the Certificate Manager ( ACM ) service principal (acm.amazonaws.com) to perform IssueCertificate , GetCertificate , and ListPermissions actions on a CA.A fluent builder forCfnPermission.Properties for defining aCfnPermission.A builder forCfnPermissionPropsAn implementation forCfnPermissionPropsInterface which all CertificateAuthority based class must implement.Internal default implementation forICertificateAuthority.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a CertificateAuthorityActivation.Internal default implementation forICertificateAuthorityActivationRef.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a CertificateAuthority.Internal default implementation forICertificateAuthorityRef.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a Certificate.Internal default implementation forICertificateRef.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a Permission.Internal default implementation forIPermissionRef.A proxy class which represents a concrete javascript instance of this type.A reference to a Permission resource.A builder forPermissionReferenceAn implementation forPermissionReference