pulumi-aws-native-kotlin/com.pulumi.awsnative.acmpca.kotlin.inputs/CertificateAuthorityCrlConfigurationArgsBuilder/crlType

crlType

@JvmName(name = "ortxqinroxfvtmuu")

suspend fun crlType(value: Output<String>)

@JvmName(name = "etctnlnvppiebyny")

suspend fun crlType(value: String?)

Parameters

value

Specifies the type of CRL. This setting determines the maximum number of certificates that the certificate authority can issue and revoke. For more information, see AWS Private CA quotas .

COMPLETE - The default setting. AWS Private CA maintains a single CRL file for all unexpired certificates issued by a CA that have been revoked for any reason. Each certificate that AWS Private CA issues is bound to a specific CRL through the CRL distribution point (CDP) defined in RFC 5280 .
PARTITIONED - Compared to complete CRLs, partitioned CRLs dramatically increase the number of certificates your private CA can issue.

When using partitioned CRLs, you must validate that the CRL's associated issuing distribution point (IDP) URI matches the certiﬁcate's CDP URI to ensure the right CRL has been fetched. AWS Private CA marks the IDP extension as critical, which your client must be able to process.