Skip to content
v2.274.0

CertificateAuthority Class ​

Defines a Certificate for ACMPCA.

Example ​

ts
import * as acmpca from 'aws-cdk-lib/aws-acmpca';

declare const vpc: ec2.Vpc;
const cluster = new msk.Cluster(this, 'Cluster', {
  clusterName: 'myCluster',
  kafkaVersion: msk.KafkaVersion.V4_1_X_KRAFT,
  vpc,
  encryptionInTransit: {
    clientBroker: msk.ClientBrokerEncryption.TLS,
  },
  clientAuthentication: msk.ClientAuthentication.tls({
    certificateAuthorities: [
      acmpca.CertificateAuthority.fromCertificateAuthorityArn(
        this,
        'CertificateAuthority',
        'arn:aws:acm-pca:us-west-2:1234567890:certificate-authority/11111111-1111-1111-1111-111111111111',
      ),
    ],
  }),
});

Methods ​

fromCertificateAuthorityArn(scope: Construct, id: string, certificateAuthorityArn: string): ICertificateAuthority@staticmethod def from_certificate_authority_arn(scope: Construct, id: str, certificate_authority_arn: str) -> ICertificateAuthoritypublic static ICertificateAuthority fromCertificateAuthorityArn(Construct scope, String id, String certificateAuthorityArn)public static ICertificateAuthority FromCertificateAuthorityArn(Construct scope, string id, string certificateAuthorityArn)func FromCertificateAuthorityArn(Scope Construct, Id *string, CertificateAuthorityArn *string) ICertificateAuthoritystatic#
Import an existing Certificate given an ARN.