TlsCertificate

class aws_cdk.aws_appmesh.TlsCertificate

Bases: object

Represents a TLS certificate.

ExampleMetadata:

infused

Example:

# A Virtual Node with listener TLS from an ACM provided certificate
# cert: certificatemanager.Certificate
# mesh: appmesh.Mesh


node = appmesh.VirtualNode(self, "node",
    mesh=mesh,
    service_discovery=appmesh.ServiceDiscovery.dns("node"),
    listeners=[appmesh.VirtualNodeListener.grpc(
        port=80,
        tls=appmesh.ListenerTlsOptions(
            mode=appmesh.TlsMode.STRICT,
            certificate=appmesh.TlsCertificate.acm(cert)
        )
    )]
)

# A Virtual Gateway with listener TLS from a customer provided file certificate
gateway = appmesh.VirtualGateway(self, "gateway",
    mesh=mesh,
    listeners=[appmesh.VirtualGatewayListener.grpc(
        port=8080,
        tls=appmesh.ListenerTlsOptions(
            mode=appmesh.TlsMode.STRICT,
            certificate=appmesh.TlsCertificate.file("path/to/certChain", "path/to/privateKey")
        )
    )],
    virtual_gateway_name="gateway"
)

# A Virtual Gateway with listener TLS from a SDS provided certificate
gateway2 = appmesh.VirtualGateway(self, "gateway2",
    mesh=mesh,
    listeners=[appmesh.VirtualGatewayListener.http2(
        port=8080,
        tls=appmesh.ListenerTlsOptions(
            mode=appmesh.TlsMode.STRICT,
            certificate=appmesh.TlsCertificate.sds("secrete_certificate")
        )
    )],
    virtual_gateway_name="gateway2"
)

Methods

abstract bind(_scope)

Returns TLS certificate based provider.

Parameters:

_scope (Construct) –

Return type:

TlsCertificateConfig

Static Methods

classmethod acm(certificate)

Returns an ACM TLS Certificate.

Parameters:

certificate (ICertificate) –

Return type:

TlsCertificate

classmethod file(certificate_chain_path, private_key_path)

Returns an File TLS Certificate.

Parameters:

• certificate_chain_path (str) –

• private_key_path (str) –

Return type:

MutualTlsCertificate

classmethod sds(secret_name)

Returns an SDS TLS Certificate.

Parameters:

secret_name (str) –

Return type:

MutualTlsCertificate