pulumi-aws-kotlin/com.pulumi.aws.acmpca.kotlin/CertificateArgs

CertificateArgs

data class CertificateArgs(val apiPassthrough: Output<String>? = null, val certificateAuthorityArn: Output<String>? = null, val certificateSigningRequest: Output<String>? = null, val signingAlgorithm: Output<String>? = null, val templateArn: Output<String>? = null, val validity: Output<CertificateValidityArgs>? = null) : ConvertibleToJava<CertificateArgs>

Provides a resource to issue a certificate using AWS Certificate Manager Private Certificate Authority (ACM PCA). Certificates created using aws.acmpca.Certificate are not eligible for automatic renewal, and must be replaced instead. To issue a renewable certificate using an ACM PCA, create a aws.acm.Certificate with the parameter certificate_authority_arn.

Example Usage

Basic

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.acmpca.CertificateAuthority;
import com.pulumi.aws.acmpca.CertificateAuthorityArgs;
import com.pulumi.tls.PrivateKey;
import com.pulumi.tls.PrivateKeyArgs;
import com.pulumi.tls.CertRequest;
import com.pulumi.tls.CertRequestArgs;
import com.pulumi.tls.inputs.CertRequestSubjectArgs;
import com.pulumi.aws.acmpca.Certificate;
import com.pulumi.aws.acmpca.CertificateArgs;
import com.pulumi.aws.acmpca.inputs.CertificateValidityArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var exampleCertificateAuthority = new CertificateAuthority("exampleCertificateAuthority", CertificateAuthorityArgs.builder()
            .privateCertificateConfiguration(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
            .permanentDeletionTimeInDays(7)
            .build());
        var key = new PrivateKey("key", PrivateKeyArgs.builder()
            .algorithm("RSA")
            .build());
        var csr = new CertRequest("csr", CertRequestArgs.builder()
            .keyAlgorithm("RSA")
            .privateKeyPem(key.privateKeyPem())
            .subject(CertRequestSubjectArgs.builder()
                .commonName("example")
                .build())
            .build());
        var exampleCertificate = new Certificate("exampleCertificate", CertificateArgs.builder()
            .certificateAuthorityArn(exampleCertificateAuthority.arn())
            .certificateSigningRequest(csr.certRequestPem())
            .signingAlgorithm("SHA256WITHRSA")
            .validity(CertificateValidityArgs.builder()
                .type("YEARS")
                .value(1)
                .build())
            .build());
    }
}

Import

ACM PCA Certificates can be imported using their ARN, e.g.,

$ pulumi import aws:acmpca/certificate:Certificate cert arn:aws:acm-pca:eu-west-1:675225743824:certificate-authority/08319ede-83g9-1400-8f21-c7d12b2b6edb/certificate/a4e9c2aa4bcfab625g1b9136464cd3a

Constructors

CertificateArgs

constructor(apiPassthrough: Output<String>? = null, certificateAuthorityArn: Output<String>? = null, certificateSigningRequest: Output<String>? = null, signingAlgorithm: Output<String>? = null, templateArn: Output<String>? = null, validity: Output<CertificateValidityArgs>? = null)

Properties

apiPassthrough

val apiPassthrough: Output<String>? = null

Specifies X.509 certificate information to be included in the issued certificate. To use with API Passthrough templates

certificateAuthorityArn

val certificateAuthorityArn: Output<String>? = null

ARN of the certificate authority.

certificateSigningRequest

val certificateSigningRequest: Output<String>? = null

Certificate Signing Request in PEM format.

signingAlgorithm

val signingAlgorithm: Output<String>? = null

Algorithm to use to sign certificate requests. Valid values: SHA256WITHRSA, SHA256WITHECDSA, SHA384WITHRSA, SHA384WITHECDSA, SHA512WITHRSA, SHA512WITHECDSA.

templateArn

val templateArn: Output<String>? = null

Template to use when issuing a certificate. See ACM PCA Documentation for more information.

validity

val validity: Output<CertificateValidityArgs>? = null

Configures end of the validity period for the certificate. See validity block below.

Functions

toJava

open override fun toJava(): CertificateArgs