CREATECERTIFICATEPROVIDER()`¶

About CreateCertificateProvider¶

Creates an Amazon Web Services IoT Core certificate provider. You can use Amazon Web Services IoT Core certificate provider to customize how to sign a certificate signing request (CSR) in IoT fleet provisioning. For more information, see Customizing certificate signing using Amazon Web Services IoT Core certificate provider from Amazon Web Services IoT Core Developer Guide.

Requires permission to access the CreateCertificateProvider action.

After you create a certificate provider, the behavior of CreateCertificateFromCsr API for fleet provisioning will change and all API calls to CreateCertificateFromCsr will invoke the certificate provider to create the certificates. It can take up to a few minutes for this behavior to change after a certificate provider is created.

Method Signature¶

METHODS /AWS1/IF_IOT~CREATECERTIFICATEPROVIDER
  IMPORTING
    !IV_CERTIFICATEPROVIDERNAME TYPE /AWS1/IOTCERTPROVIDERNAME OPTIONAL
    !IV_LAMBDAFUNCTIONARN TYPE /AWS1/IOTCERTPVDRFUNCTIONARN OPTIONAL
    !IT_ACCOUNTDEFAULTFOROPS TYPE /AWS1/CL_IOTCRTPVDRACDEFFORO00=>TT_CERTPVDRACCOUNTDEFFOROPS OPTIONAL
    !IV_CLIENTTOKEN TYPE /AWS1/IOTCLIENTTOKEN OPTIONAL
    !IT_TAGS TYPE /AWS1/CL_IOTTAG=>TT_TAGLIST OPTIONAL
  RETURNING
    VALUE(OO_OUTPUT) TYPE REF TO /aws1/cl_iotcreatecertpvdrrsp
  RAISING
    /AWS1/CX_IOTINTERNALFAILUREEX
    /AWS1/CX_IOTINVALIDREQUESTEX
    /AWS1/CX_IOTLIMITEXCEEDEDEX
    /AWS1/CX_IOTRESRCALRDYEXISTSEX
    /AWS1/CX_IOTSERVICEUNAVAILEX
    /AWS1/CX_IOTTHROTTLINGEX
    /AWS1/CX_IOTUNAUTHORIZEDEX
    /AWS1/CX_IOTCLIENTEXC
    /AWS1/CX_IOTSERVEREXC
    /AWS1/CX_RT_TECHNICAL_GENERIC
    /AWS1/CX_RT_SERVICE_GENERIC.

IMPORTING¶

Required arguments:¶

`iv_certificateprovidername` `TYPE /AWS1/IOTCERTPROVIDERNAME` `/AWS1/IOTCERTPROVIDERNAME`¶

The name of the certificate provider.

`iv_lambdafunctionarn` `TYPE /AWS1/IOTCERTPVDRFUNCTIONARN` `/AWS1/IOTCERTPVDRFUNCTIONARN`¶

The ARN of the Lambda function that defines the authentication logic.

`it_accountdefaultforops` `TYPE /AWS1/CL_IOTCRTPVDRACDEFFORO00=>TT_CERTPVDRACCOUNTDEFFOROPS` `TT_CERTPVDRACCOUNTDEFFOROPS`¶

A list of the operations that the certificate provider will use to generate certificates. Valid value: CreateCertificateFromCsr.

Optional arguments:¶

`iv_clienttoken` `TYPE /AWS1/IOTCLIENTTOKEN` `/AWS1/IOTCLIENTTOKEN`¶

A string that you can optionally pass in the CreateCertificateProvider request to make sure the request is idempotent.

`it_tags` `TYPE /AWS1/CL_IOTTAG=>TT_TAGLIST` `TT_TAGLIST`¶

Metadata which can be used to manage the certificate provider.

RETURNING¶

`oo_output` `TYPE REF TO /aws1/cl_iotcreatecertpvdrrsp` `/AWS1/CL_IOTCREATECERTPVDRRSP`¶

Domain /AWS1/RT_ACCOUNT_ID

Primitive Type NUMC

Examples¶

Syntax Example¶

This is an example of the syntax for calling the method. It includes every possible argument and initializes every possible value. The data provided is not necessarily semantically accurate (for example the value "string" may be provided for something that is intended to be an instance ID, or in some cases two arguments may be mutually exclusive). The syntax shows the ABAP syntax for creating the various data structures.

DATA(lo_result) = lo_client->createcertificateprovider(
  it_accountdefaultforops = VALUE /aws1/cl_iotcrtpvdracdefforo00=>tt_certpvdraccountdefforops(
    ( new /aws1/cl_iotcrtpvdracdefforo00( |string| ) )
  )
  it_tags = VALUE /aws1/cl_iottag=>tt_taglist(
    (
      new /aws1/cl_iottag(
        iv_key = |string|
        iv_value = |string|
      )
    )
  )
  iv_certificateprovidername = |string|
  iv_clienttoken = |string|
  iv_lambdafunctionarn = |string|
).

This is an example of reading all possible response values

lo_result = lo_result.
IF lo_result IS NOT INITIAL.
  lv_certificateprovidername = lo_result->get_certificateprovidername( ).
  lv_certificateproviderarn = lo_result->get_certificateproviderarn( ).
ENDIF.

/AWS1/IF_IOT=>CREATECERTIFICATEPROVIDER()¶