software.amazon.awscdk.services.appmesh

Interface CfnVirtualNode.TlsValidationContextProperty

All Known Implementing Classes:

CfnVirtualNode.TlsValidationContextProperty.Jsii$Proxy

Enclosing class:

CfnVirtualNode

public static interface CfnVirtualNode.TlsValidationContextProperty

An object that represents how the proxy will validate its peer during Transport Layer Security (TLS) negotiation.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.appmesh.*;
 TlsValidationContextProperty tlsValidationContextProperty = TlsValidationContextProperty.builder()
         .trust(TlsValidationContextTrustProperty.builder()
                 .acm(TlsValidationContextAcmTrustProperty.builder()
                         .certificateAuthorityArns(List.of("certificateAuthorityArns"))
                         .build())
                 .file(TlsValidationContextFileTrustProperty.builder()
                         .certificateChain("certificateChain")
                         .build())
                 .sds(TlsValidationContextSdsTrustProperty.builder()
                         .secretName("secretName")
                         .build())
                 .build())
         // the properties below are optional
         .subjectAlternativeNames(SubjectAlternativeNamesProperty.builder()
                 .match(SubjectAlternativeNameMatchersProperty.builder()
                         .exact(List.of("exact"))
                         .build())
                 .build())
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	CfnVirtualNode.TlsValidationContextProperty.Builder A builder for CfnVirtualNode.TlsValidationContextProperty
static class	CfnVirtualNode.TlsValidationContextProperty.Jsii$Proxy An implementation for CfnVirtualNode.TlsValidationContextProperty

Method Summary

Modifier and Type	Method and Description
static CfnVirtualNode.TlsValidationContextProperty.Builder	builder()
default java.lang.Object	getSubjectAlternativeNames() A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context.
java.lang.Object	getTrust() A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.

Method Detail

getTrust

java.lang.Object getTrust()

A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.

getSubjectAlternativeNames

default java.lang.Object getSubjectAlternativeNames()

A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context.

If you don't specify SANs on the terminating mesh endpoint, the Envoy proxy for that node doesn't verify the SAN on a peer client certificate. If you don't specify SANs on the originating mesh endpoint, the SAN on the certificate provided by the terminating endpoint must match the mesh endpoint service discovery configuration. Since SPIRE vended certificates have a SPIFFE ID as a name, you must set the SAN since the name doesn't match the service discovery name.

builder

static CfnVirtualNode.TlsValidationContextProperty.Builder builder()

Returns:

a CfnVirtualNode.TlsValidationContextProperty.Builder of CfnVirtualNode.TlsValidationContextProperty