Tls
data class TlsInspectionConfigurationServerCertificateConfigurationArgs(val certificateAuthorityArn: Output<String>? = null, val checkCertificateRevocationStatus: Output<TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs>? = null, val scopes: Output<List<TlsInspectionConfigurationServerCertificateScopeArgs>>? = null, val serverCertificates: Output<List<TlsInspectionConfigurationServerCertificateArgs>>? = null) : ConvertibleToJava<TlsInspectionConfigurationServerCertificateConfigurationArgs>
Constructors
Link copied to clipboard
constructor(certificateAuthorityArn: Output<String>? = null, checkCertificateRevocationStatus: Output<TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs>? = null, scopes: Output<List<TlsInspectionConfigurationServerCertificateScopeArgs>>? = null, serverCertificates: Output<List<TlsInspectionConfigurationServerCertificateArgs>>? = null)
Properties
Link copied to clipboard
The Amazon Resource Name (ARN) of the imported certificate authority (CA) certificate within AWS Certificate Manager (ACM) to use for outbound SSL/TLS inspection. The following limitations apply:
Link copied to clipboard
val checkCertificateRevocationStatus: Output<TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusPropertiesArgs>? = null
When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a CertificateAuthorityArn in ServerCertificateConfiguration .
Link copied to clipboard
A list of scopes.
Link copied to clipboard
The list of server certificates to use for inbound SSL/TLS inspection.