Interface CfnCertificateAuthorityProps
- All Superinterfaces:
software.amazon.jsii.JsiiSerializable
- All Known Implementing Classes:
CfnCertificateAuthorityProps.Jsii$Proxy
CfnCertificateAuthority
.
Example:
CfnCertificateAuthority cfnCertificateAuthority = CfnCertificateAuthority.Builder.create(this, "CA") .type("ROOT") .keyAlgorithm("RSA_2048") .signingAlgorithm("SHA256WITHRSA") .subject(SubjectProperty.builder() .country("US") .organization("string") .organizationalUnit("string") .distinguishedNameQualifier("string") .state("string") .commonName("123") .serialNumber("string") .locality("string") .title("string") .surname("string") .givenName("string") .initials("DG") .pseudonym("string") .generationQualifier("DBG") .build()) .build();
- See Also:
-
Nested Class Summary
Nested ClassesModifier and TypeInterfaceDescriptionstatic final class
A builder forCfnCertificateAuthorityProps
static final class
An implementation forCfnCertificateAuthorityProps
-
Method Summary
Modifier and TypeMethodDescriptionbuilder()
default Object
Specifies information to be added to the extension section of the certificate signing request (CSR).Type of the public key algorithm and size, in bits, of the key pair that your CA creates when it issues a certificate.default String
Specifies a cryptographic key management compliance standard used for handling CA keys.default Object
Information about the Online Certificate Status Protocol (OCSP) configuration or certificate revocation list (CRL) created and maintained by your private CA.Name of the algorithm your private CA uses to sign certificate requests.Structure that contains X.500 distinguished name information for your private CA.getTags()
Key-value pairs that will be attached to the new private CA.getType()
Type of your private CA.default String
Specifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly.Methods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson
-
Method Details
-
getKeyAlgorithm
Type of the public key algorithm and size, in bits, of the key pair that your CA creates when it issues a certificate.When you create a subordinate CA, you must use a key algorithm supported by the parent CA.
- See Also:
-
getSigningAlgorithm
Name of the algorithm your private CA uses to sign certificate requests.This parameter should not be confused with the
SigningAlgorithm
parameter used to sign certificates when they are issued.- See Also:
-
getSubject
Structure that contains X.500 distinguished name information for your private CA.- See Also:
-
getType
Type of your private CA.- See Also:
-
getCsrExtensions
Specifies information to be added to the extension section of the certificate signing request (CSR).- See Also:
-
getKeyStorageSecurityStandard
Specifies a cryptographic key management compliance standard used for handling CA keys.Default: FIPS_140_2_LEVEL_3_OR_HIGHER
Some AWS Regions do not support the default. When creating a CA in these Regions, you must provide
FIPS_140_2_LEVEL_2_OR_HIGHER
as the argument forKeyStorageSecurityStandard
. Failure to do this results in anInvalidArgsException
with the message, "A certificate authority cannot be created in this region with the specified security standard."For information about security standard support in various Regions, see Storage and security compliance of AWS Private CA private keys .
- See Also:
-
getRevocationConfiguration
Information about the Online Certificate Status Protocol (OCSP) configuration or certificate revocation list (CRL) created and maintained by your private CA.- See Also:
-
getTags
Key-value pairs that will be attached to the new private CA.You can associate up to 50 tags with a private CA. For information using tags with IAM to manage permissions, see Controlling Access Using IAM Tags .
- See Also:
-
getUsageMode
Specifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly.Short-lived certificate validity is limited to seven days.
The default value is GENERAL_PURPOSE.
- See Also:
-
builder
-