DeleteCertificateAuthority

Contoh Java berikut menunjukkan cara menggunakan DeleteCertificateAuthorityoperasi.

Operasi ini menghapus otoritas sertifikat pribadi (CA) yang Anda buat menggunakan CreateCertificateAuthorityoperasi. Operasi DeleteCertificateAuthority mengharuskan Anda membiarkan ARN agar dihapus CA. Anda dapat menemukan ARN dengan memanggil operasi. ListCertificateAuthorities Anda dapat langsung menghapus CA privat jika statusnya CREATING atau PENDING_CERTIFICATE. Namun, jika Anda telah mengimpor sertifikat, Anda tidak dapat langsung menghapusnya. Anda harus terlebih dahulu menonaktifkan CA dengan memanggil UpdateCertificateAuthorityoperasi dan mengatur Status parameter keDISABLED. Anda kemudian dapat menggunakan parameter PermanentDeletionTimeInDays dalam operasi DeleteCertificateAuthorityuntuk menentukan jumlah hari, dari 7 hingga 30 hari. Selama periode tersebut, CA privat dapat dikembalikan ke status disabled. Secara default, jika Anda tidak mengatur parameter PermanentDeletionTimeInDays, maka masa pemulihannya 30 hari. Setelah masa ini kedaluwarsa, CA privat dihapus secara permanen dan tidak dapat dipulihkan. Untuk informasi selengkapnya, lihat Memulihkan CA.

Untuk contoh Java yang menunjukkan cara menggunakan RestoreCertificateAuthorityoperasi, lihatRestoreCertificateAuthority.

package com.amazonaws.samples;

import com.amazonaws.auth.AWSCredentials;
import com.amazonaws.auth.profile.ProfileCredentialsProvider;
import com.amazonaws.client.builder.AwsClientBuilder;
import com.amazonaws.client.builder.AwsClientBuilder.EndpointConfiguration;
import com.amazonaws.auth.AWSStaticCredentialsProvider;

import com.amazonaws.services.acmpca.AWSACMPCA;
import com.amazonaws.services.acmpca.AWSACMPCAClientBuilder;

import com.amazonaws.services.acmpca.model.DeleteCertificateAuthorityRequest;

import com.amazonaws.AmazonClientException;
import com.amazonaws.services.acmpca.model.ResourceNotFoundException;
import com.amazonaws.services.acmpca.model.InvalidArnException;
import com.amazonaws.services.acmpca.model.InvalidStateException;
import com.amazonaws.services.acmpca.model.RequestFailedException;

public class DeleteCertificateAuthority {

   public static void main(String[] args) throws Exception{

      // Retrieve your credentials from the C:\Users\name\.aws\credentials file
      // in Windows or the .aws/credentials file in Linux.
      AWSCredentials credentials = null;
      try {
         credentials = new ProfileCredentialsProvider("default").getCredentials();
      } catch (Exception e) {
         throw new AmazonClientException("Cannot load your credentials from disk", e);
      }

      // Define the endpoint for your sample.
      String endpointRegion = "region";  // Substitute your region here, e.g. "us-west-2"
      String endpointProtocol = "https://acm-pca." + endpointRegion + ".amazonaws.com/";
      EndpointConfiguration endpoint =
            new AwsClientBuilder.EndpointConfiguration(endpointProtocol, endpointRegion);

      // Create a client that you can use to make requests.
      AWSACMPCA client = AWSACMPCAClientBuilder.standard()
         .withEndpointConfiguration(endpoint)
         .withCredentials(new AWSStaticCredentialsProvider(credentials))
         .build();

      // Create a requrest object and set the ARN of the private CA to delete.
      DeleteCertificateAuthorityRequest req = new DeleteCertificateAuthorityRequest();

      // Set the certificate authority ARN.
      req.withCertificateAuthorityArn("arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566");
            
      // Set the recovery period.
      req.withPermanentDeletionTimeInDays(12);            

      // Delete the CA.
      try {
         client.deleteCertificateAuthority(req);
      } catch (ResourceNotFoundException ex) {
         throw ex;
      } catch (InvalidArnException ex) {
         throw ex;
      } catch (InvalidStateException ex) {
         throw ex;
      } catch (RequestFailedException ex) {
         throw ex;
      }
   }
}