AWS::ACMPCA::CertificateAuthority CsrExtensions

Describes the certificate extensions to be added to the certificate signing request (CSR).

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "KeyUsage" : KeyUsage,
  "SubjectInformationAccess" : [ AccessDescription, ... ]
}

YAML

  KeyUsage: 
    KeyUsage
  SubjectInformationAccess: 
    - AccessDescription

Properties

KeyUsage

Indicates the purpose of the certificate and of the key contained in the certificate.

Required: No

Type: KeyUsage

Update requires: Replacement

SubjectInformationAccess

For CA certificates, provides a path to additional information pertaining to the CA, such as revocation and policy. For more information, see Subject Information Access in RFC 5280.

Required: No

Type: Array of AccessDescription

Update requires: Replacement