Package software.amazon.awscdk.services.iot

Interface CfnDomainConfiguration.ServerCertificateConfigProperty

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnDomainConfiguration.ServerCertificateConfigProperty.Jsii$Proxy

Enclosing class:

CfnDomainConfiguration

@Stability(Stable)
public static interface CfnDomainConfiguration.ServerCertificateConfigProperty
extends software.amazon.jsii.JsiiSerializable

The server certificate configuration.

For more information, see Configurable endpoints from the AWS IoT Core Developer Guide.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.iot.*;
 ServerCertificateConfigProperty serverCertificateConfigProperty = ServerCertificateConfigProperty.builder()
         .enableOcspCheck(false)
         .ocspAuthorizedResponderArn("ocspAuthorizedResponderArn")
         .ocspLambdaArn("ocspLambdaArn")
         .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-domainconfiguration-servercertificateconfig.html

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnDomainConfiguration.ServerCertificateConfigProperty.Builder	A builder for CfnDomainConfiguration.ServerCertificateConfigProperty
static final class	CfnDomainConfiguration.ServerCertificateConfigProperty.Jsii$Proxy	An implementation for CfnDomainConfiguration.ServerCertificateConfigProperty

Method Summary

Modifier and Type	Method	Description
static CfnDomainConfiguration.ServerCertificateConfigProperty.Builder	builder()
default Object	getEnableOcspCheck()	A Boolean value that indicates whether Online Certificate Status Protocol (OCSP) server certificate check is enabled or not.
default String	getOcspAuthorizedResponderArn()	The Amazon Resource Name (ARN) for an X.509 certificate stored in ACM.
default String	getOcspLambdaArn()	The Amazon Resource Name (ARN) for a Lambda function that acts as a Request for Comments (RFC) 6960-compliant Online Certificate Status Protocol (OCSP) responder, supporting basic OCSP responses.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getEnableOcspCheck

@Stability(Stable)
@Nullable
default Object getEnableOcspCheck()

A Boolean value that indicates whether Online Certificate Status Protocol (OCSP) server certificate check is enabled or not.

For more information, see Configurable endpoints from the AWS IoT Core Developer Guide.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-domainconfiguration-servercertificateconfig.html#cfn-iot-domainconfiguration-servercertificateconfig-enableocspcheck

getOcspAuthorizedResponderArn

@Stability(Stable)
@Nullable
default String getOcspAuthorizedResponderArn()

The Amazon Resource Name (ARN) for an X.509 certificate stored in ACM. If provided, AWS IoT Core will use this certificate to validate the signature of the received OCSP response. The OCSP responder must sign responses using either this authorized responder certificate or the issuing certificate, depending on whether the ARN is provided or not. The certificate must be in the same account and region as the domain configuration.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-domainconfiguration-servercertificateconfig.html#cfn-iot-domainconfiguration-servercertificateconfig-ocspauthorizedresponderarn

getOcspLambdaArn

@Stability(Stable)
@Nullable
default String getOcspLambdaArn()

The Amazon Resource Name (ARN) for a Lambda function that acts as a Request for Comments (RFC) 6960-compliant Online Certificate Status Protocol (OCSP) responder, supporting basic OCSP responses.

The Lambda function accepts a base64-encoding of the OCSP request in the Distinguished Encoding Rules (DER) format. The Lambda function's response is also a base64-encoded OCSP response in the DER format. The response size must not exceed 4 kilobytes (KiB). The Lambda function must be in the same account and region as the domain configuration.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-domainconfiguration-servercertificateconfig.html#cfn-iot-domainconfiguration-servercertificateconfig-ocsplambdaarn

builder

@Stability(Stable)
static CfnDomainConfiguration.ServerCertificateConfigProperty.Builder builder()

Returns:

a CfnDomainConfiguration.ServerCertificateConfigProperty.Builder of CfnDomainConfiguration.ServerCertificateConfigProperty