pulumi-aws-kotlin/com.pulumi.aws.cloudfront.kotlin.inputs/DistributionViewerCertificateArgs

DistributionViewerCertificateArgs

data class DistributionViewerCertificateArgs(val acmCertificateArn: Output<String>? = null, val cloudfrontDefaultCertificate: Output<Boolean>? = null, val iamCertificateId: Output<String>? = null, val minimumProtocolVersion: Output<String>? = null, val sslSupportMethod: Output<String>? = null) : ConvertibleToJava<DistributionViewerCertificateArgs>

Constructors

Link copied to clipboard
fun DistributionViewerCertificateArgs(acmCertificateArn: Output<String>? = null, cloudfrontDefaultCertificate: Output<Boolean>? = null, iamCertificateId: Output<String>? = null, minimumProtocolVersion: Output<String>? = null, sslSupportMethod: Output<String>? = null)

Functions

Link copied to clipboard
open override fun toJava(): DistributionViewerCertificateArgs

Properties

Link copied to clipboard
val acmCertificateArn: Output<String>? = null

ARN of the AWS Certificate Manager certificate that you wish to use with this distribution. Specify this, cloudfront_default_certificate, or iam_certificate_id. The ACM certificate must be in US-EAST-1.

Link copied to clipboard
val cloudfrontDefaultCertificate: Output<Boolean>? = null

true if you want viewers to use HTTPS to request your objects and you're using the CloudFront domain name for your distribution. Specify this, acm_certificate_arn, or iam_certificate_id.

Link copied to clipboard
val iamCertificateId: Output<String>? = null

IAM certificate identifier of the custom viewer certificate for this distribution if you are using a custom domain. Specify this, acm_certificate_arn, or cloudfront_default_certificate.

Link copied to clipboard
val minimumProtocolVersion: Output<String>? = null

Minimum version of the SSL protocol that you want CloudFront to use for HTTPS connections. Can only be set if cloudfront_default_certificate = false. See all possible values in this table under "Security policy." Some examples include: TLSv1.2_2019 and TLSv1.2_2021. Default: TLSv1. NOTE: If you are using a custom certificate (specified with acm_certificate_arn or iam_certificate_id), and have specified sni-only in ssl_support_method, TLSv1 or later must be specified. If you have specified vip in ssl_support_method, only SSLv3 or TLSv1 can be specified. If you have specified cloudfront_default_certificate, TLSv1 must be specified.

Link copied to clipboard
val sslSupportMethod: Output<String>? = null

How you want CloudFront to serve HTTPS requests. One of vip or sni-only. Required if you specify acm_certificate_arn or iam_certificate_id. NOTE: vip causes CloudFront to use a dedicated IP address and may incur extra charges.