software.amazon.awscdk.services.ec2

Class CfnEnclaveCertificateIamRoleAssociation

java.lang.Object

software.constructs.Construct

software.amazon.awscdk.core.Construct

software.amazon.awscdk.core.CfnElement

software.amazon.awscdk.core.CfnRefElement

software.amazon.awscdk.core.CfnResource

software.amazon.awscdk.services.ec2.CfnEnclaveCertificateIamRoleAssociation

All Implemented Interfaces:

IConstruct, IDependable, IInspectable

@Generated(value="jsii-pacmak/1.74.0 (build 6d08790)",
           date="2023-03-14T16:25:27.992Z")
public class CfnEnclaveCertificateIamRoleAssociation
extends CfnResource
implements IInspectable

A CloudFormation `AWS::EC2::EnclaveCertificateIamRoleAssociation`.

Associates an AWS Identity and Access Management (IAM) role with an AWS Certificate Manager (ACM) certificate. This enables the certificate to be used by the ACM for Nitro Enclaves application inside an enclave. For more information, see AWS Certificate Manager for Nitro Enclaves in the AWS Nitro Enclaves User Guide .

When the IAM role is associated with the ACM certificate, the certificate, certificate chain, and encrypted private key are placed in an Amazon S3 location that only the associated IAM role can access. The private key of the certificate is encrypted with an AWS managed key that has an attached attestation-based key policy.

To enable the IAM role to access the Amazon S3 object, you must grant it permission to call s3:GetObject on the Amazon S3 bucket returned by the command. To enable the IAM role to access the KMS key, you must grant it permission to call kms:Decrypt on the KMS key returned by the command. For more information, see Grant the role permission to access the certificate and encryption key in the AWS Nitro Enclaves User Guide .

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.ec2.*;
 CfnEnclaveCertificateIamRoleAssociation cfnEnclaveCertificateIamRoleAssociation = CfnEnclaveCertificateIamRoleAssociation.Builder.create(this, "MyCfnEnclaveCertificateIamRoleAssociation")
         .certificateArn("certificateArn")
         .roleArn("roleArn")
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	CfnEnclaveCertificateIamRoleAssociation.Builder A fluent builder for CfnEnclaveCertificateIamRoleAssociation.

Nested classes/interfaces inherited from interface software.amazon.awscdk.core.IInspectable

IInspectable.Jsii$Default, IInspectable.Jsii$Proxy

Nested classes/interfaces inherited from interface software.amazon.awscdk.core.IConstruct

IConstruct.Jsii$Default

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	CFN_RESOURCE_TYPE_NAME The CloudFormation resource type name for this resource class.

Constructor Summary

Constructors

Modifier	Constructor and Description
	CfnEnclaveCertificateIamRoleAssociation(Construct scope, java.lang.String id, CfnEnclaveCertificateIamRoleAssociationProps props) Create a new `AWS::EC2::EnclaveCertificateIamRoleAssociation`.
protected	CfnEnclaveCertificateIamRoleAssociation(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
protected	CfnEnclaveCertificateIamRoleAssociation(software.amazon.jsii.JsiiObjectRef objRef)

Method Summary

Modifier and Type	Method and Description
java.lang.String	getAttrCertificateS3BucketName() The name of the Amazon S3 bucket to which the certificate was uploaded.
java.lang.String	getAttrCertificateS3ObjectKey() The Amazon S3 object key where the certificate, certificate chain, and encrypted private key bundle are stored.
java.lang.String	getAttrEncryptionKmsKeyId() The ID of the AWS KMS key used to encrypt the private key of the certificate.
java.lang.String	getCertificateArn() The ARN of the ACM certificate with which to associate the IAM role.
protected java.util.Map<java.lang.String,java.lang.Object>	getCfnProperties()
java.lang.String	getRoleArn() The ARN of the IAM role to associate with the ACM certificate.
void	inspect(TreeInspector inspector) Examines the CloudFormation resource and discloses attributes.
protected java.util.Map<java.lang.String,java.lang.Object>	renderProperties(java.util.Map<java.lang.String,java.lang.Object> props)
void	setCertificateArn(java.lang.String value) The ARN of the ACM certificate with which to associate the IAM role.
void	setRoleArn(java.lang.String value) The ARN of the IAM role to associate with the ACM certificate.

Methods inherited from class software.amazon.awscdk.core.CfnResource

addDeletionOverride, addDependsOn, addMetadata, addOverride, addPropertyDeletionOverride, addPropertyOverride, applyRemovalPolicy, applyRemovalPolicy, applyRemovalPolicy, getAtt, getCfnOptions, getCfnResourceType, getMetadata, getUpdatedProperites, isCfnResource, shouldSynthesize, toString, validateProperties

Methods inherited from class software.amazon.awscdk.core.CfnRefElement

getRef

Methods inherited from class software.amazon.awscdk.core.CfnElement

getCreationStack, getLogicalId, getStack, isCfnElement, overrideLogicalId

Methods inherited from class software.amazon.awscdk.core.Construct

getNode, isConstruct, onPrepare, onSynthesize, onValidate, prepare, synthesize, validate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

CFN_RESOURCE_TYPE_NAME

public static final java.lang.String CFN_RESOURCE_TYPE_NAME

The CloudFormation resource type name for this resource class.

Constructor Detail

CfnEnclaveCertificateIamRoleAssociation

protected CfnEnclaveCertificateIamRoleAssociation(software.amazon.jsii.JsiiObjectRef objRef)

CfnEnclaveCertificateIamRoleAssociation

protected CfnEnclaveCertificateIamRoleAssociation(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

CfnEnclaveCertificateIamRoleAssociation

public CfnEnclaveCertificateIamRoleAssociation(Construct scope,
                                               java.lang.String id,
                                               CfnEnclaveCertificateIamRoleAssociationProps props)

Create a new `AWS::EC2::EnclaveCertificateIamRoleAssociation`.

Parameters:

scope - - scope in which this resource is defined. This parameter is required.

id - - scoped id of the resource. This parameter is required.

props - - resource properties. This parameter is required.

Method Detail

inspect

public void inspect(TreeInspector inspector)

Examines the CloudFormation resource and discloses attributes.

Specified by:

inspect in interface IInspectable

Parameters:

inspector - - tree inspector to collect and process attributes. This parameter is required.

renderProperties

protected java.util.Map<java.lang.String,java.lang.Object> renderProperties(java.util.Map<java.lang.String,java.lang.Object> props)

Overrides:

renderProperties in class CfnResource

Parameters:

props - This parameter is required.

getAttrCertificateS3BucketName

public java.lang.String getAttrCertificateS3BucketName()

The name of the Amazon S3 bucket to which the certificate was uploaded.

getAttrCertificateS3ObjectKey

public java.lang.String getAttrCertificateS3ObjectKey()

The Amazon S3 object key where the certificate, certificate chain, and encrypted private key bundle are stored.

The object key is formatted as follows: role_arn / certificate_arn .

getAttrEncryptionKmsKeyId

public java.lang.String getAttrEncryptionKmsKeyId()

The ID of the AWS KMS key used to encrypt the private key of the certificate.

getCfnProperties

protected java.util.Map<java.lang.String,java.lang.Object> getCfnProperties()

Overrides:

getCfnProperties in class CfnResource

getCertificateArn

public java.lang.String getCertificateArn()

The ARN of the ACM certificate with which to associate the IAM role.

setCertificateArn

public void setCertificateArn(java.lang.String value)

The ARN of the ACM certificate with which to associate the IAM role.

getRoleArn

public java.lang.String getRoleArn()

The ARN of the IAM role to associate with the ACM certificate.

You can associate up to 16 IAM roles with an ACM certificate.

setRoleArn

public void setRoleArn(java.lang.String value)

The ARN of the IAM role to associate with the ACM certificate.

You can associate up to 16 IAM roles with an ACM certificate.