software.amazon.awscdk.services.appmesh

Class TlsCertificate

java.lang.Object

software.amazon.jsii.JsiiObject

software.amazon.awscdk.services.appmesh.TlsCertificate

Direct Known Subclasses:

MutualTlsCertificate

@Generated(value="jsii-pacmak/1.74.0 (build 6d08790)",
           date="2023-03-22T19:35:48.674Z")
public abstract class TlsCertificate
extends software.amazon.jsii.JsiiObject

Represents a TLS certificate.

Example:

 // A Virtual Node with listener TLS from an ACM provided certificate
 Certificate cert;
 Mesh mesh;
 VirtualNode node = VirtualNode.Builder.create(this, "node")
         .mesh(mesh)
         .serviceDiscovery(ServiceDiscovery.dns("node"))
         .listeners(List.of(VirtualNodeListener.grpc(GrpcVirtualNodeListenerOptions.builder()
                 .port(80)
                 .tls(ListenerTlsOptions.builder()
                         .mode(TlsMode.STRICT)
                         .certificate(TlsCertificate.acm(cert))
                         .build())
                 .build())))
         .build();
 // A Virtual Gateway with listener TLS from a customer provided file certificate
 VirtualGateway gateway = VirtualGateway.Builder.create(this, "gateway")
         .mesh(mesh)
         .listeners(List.of(VirtualGatewayListener.grpc(GrpcGatewayListenerOptions.builder()
                 .port(8080)
                 .tls(ListenerTlsOptions.builder()
                         .mode(TlsMode.STRICT)
                         .certificate(TlsCertificate.file("path/to/certChain", "path/to/privateKey"))
                         .build())
                 .build())))
         .virtualGatewayName("gateway")
         .build();
 // A Virtual Gateway with listener TLS from a SDS provided certificate
 VirtualGateway gateway2 = VirtualGateway.Builder.create(this, "gateway2")
         .mesh(mesh)
         .listeners(List.of(VirtualGatewayListener.http2(Http2GatewayListenerOptions.builder()
                 .port(8080)
                 .tls(ListenerTlsOptions.builder()
                         .mode(TlsMode.STRICT)
                         .certificate(TlsCertificate.sds("secrete_certificate"))
                         .build())
                 .build())))
         .virtualGatewayName("gateway2")
         .build();
 

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	TlsCertificate()
protected	TlsCertificate(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
protected	TlsCertificate(software.amazon.jsii.JsiiObjectRef objRef)

Method Summary

Modifier and Type	Method and Description
static TlsCertificate	acm(ICertificate certificate) Returns an ACM TLS Certificate.
abstract TlsCertificateConfig	bind(Construct _scope) Returns TLS certificate based provider.
static MutualTlsCertificate	file(java.lang.String certificateChainPath, java.lang.String privateKeyPath) Returns an File TLS Certificate.
static MutualTlsCertificate	sds(java.lang.String secretName) Returns an SDS TLS Certificate.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TlsCertificate

protected TlsCertificate(software.amazon.jsii.JsiiObjectRef objRef)

TlsCertificate

protected TlsCertificate(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

TlsCertificate

protected TlsCertificate()

Method Detail

acm

public static TlsCertificate acm(ICertificate certificate)

Returns an ACM TLS Certificate.

Parameters:

certificate - This parameter is required.

file

public static MutualTlsCertificate file(java.lang.String certificateChainPath,
                                        java.lang.String privateKeyPath)

Returns an File TLS Certificate.

Parameters:

certificateChainPath - This parameter is required.

privateKeyPath - This parameter is required.

sds

public static MutualTlsCertificate sds(java.lang.String secretName)

Returns an SDS TLS Certificate.

Parameters:

secretName - This parameter is required.

bind

public abstract TlsCertificateConfig bind(Construct _scope)

Returns TLS certificate based provider.

Parameters:

_scope - This parameter is required.