Class CfnCertificateAuthorityPropsMixin.Builder
- All Implemented Interfaces:
software.amazon.jsii.Builder<CfnCertificateAuthorityPropsMixin>
- Enclosing class:
CfnCertificateAuthorityPropsMixin
CfnCertificateAuthorityPropsMixin.-
Method Summary
Modifier and TypeMethodDescriptionbuild()create()create(CfnPropertyMixinOptions options) Specifies information to be added to the extension section of the certificate signing request (CSR).csrExtensions(IResolvable csrExtensions) Specifies information to be added to the extension section of the certificate signing request (CSR).keyAlgorithm(String keyAlgorithm) Type of the public key algorithm and size, in bits, of the key pair that your CA creates when it issues a certificate.keyStorageSecurityStandard(String keyStorageSecurityStandard) Specifies a cryptographic key management compliance standard for handling and protecting CA keys.revocationConfiguration(CfnCertificateAuthorityPropsMixin.RevocationConfigurationProperty revocationConfiguration) Information about the Online Certificate Status Protocol (OCSP) configuration or certificate revocation list (CRL) created and maintained by your private CA.revocationConfiguration(IResolvable revocationConfiguration) Information about the Online Certificate Status Protocol (OCSP) configuration or certificate revocation list (CRL) created and maintained by your private CA.signingAlgorithm(String signingAlgorithm) Name of the algorithm your private CA uses to sign certificate requests.Structure that contains X.500 distinguished name information for your private CA.subject(IResolvable subject) Structure that contains X.500 distinguished name information for your private CA.Key-value pairs that will be attached to the new private CA.Type of your private CA.Specifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly.
-
Method Details
-
create
@Stability(Stable) public static CfnCertificateAuthorityPropsMixin.Builder create(CfnPropertyMixinOptions options) - Parameters:
options- Mixin options.- Returns:
- a new instance of
CfnCertificateAuthorityPropsMixin.Builder.
-
create
- Returns:
- a new instance of
CfnCertificateAuthorityPropsMixin.Builder.
-
csrExtensions
@Stability(Stable) public CfnCertificateAuthorityPropsMixin.Builder csrExtensions(IResolvable csrExtensions) Specifies information to be added to the extension section of the certificate signing request (CSR).- Parameters:
csrExtensions- Specifies information to be added to the extension section of the certificate signing request (CSR). This parameter is required.- Returns:
this- See Also:
-
csrExtensions
@Stability(Stable) public CfnCertificateAuthorityPropsMixin.Builder csrExtensions(CfnCertificateAuthorityPropsMixin.CsrExtensionsProperty csrExtensions) Specifies information to be added to the extension section of the certificate signing request (CSR).- Parameters:
csrExtensions- Specifies information to be added to the extension section of the certificate signing request (CSR). This parameter is required.- Returns:
this- See Also:
-
keyAlgorithm
@Stability(Stable) public CfnCertificateAuthorityPropsMixin.Builder keyAlgorithm(String keyAlgorithm) Type of the public key algorithm and size, in bits, of the key pair that your CA creates when it issues a certificate.When you create a subordinate CA, you must use a key algorithm supported by the parent CA.
- Parameters:
keyAlgorithm- Type of the public key algorithm and size, in bits, of the key pair that your CA creates when it issues a certificate. This parameter is required.- Returns:
this- See Also:
-
keyStorageSecurityStandard
@Stability(Stable) public CfnCertificateAuthorityPropsMixin.Builder keyStorageSecurityStandard(String keyStorageSecurityStandard) Specifies a cryptographic key management compliance standard for handling and protecting CA keys.Default: FIPS_140_2_LEVEL_3_OR_HIGHER
Some AWS Regions don't support the default value. When you create a CA in these Regions, you must use
CCPC_LEVEL_1_OR_HIGHERfor theKeyStorageSecurityStandardparameter. If you don't, the operation returns anInvalidArgsExceptionwith this message: "A certificate authority cannot be created in this region with the specified security standard."For information about security standard support in different AWS Regions, see Storage and security compliance of AWS Private CA private keys .
- Parameters:
keyStorageSecurityStandard- Specifies a cryptographic key management compliance standard for handling and protecting CA keys. This parameter is required.- Returns:
this- See Also:
-
revocationConfiguration
@Stability(Stable) public CfnCertificateAuthorityPropsMixin.Builder revocationConfiguration(IResolvable revocationConfiguration) Information about the Online Certificate Status Protocol (OCSP) configuration or certificate revocation list (CRL) created and maintained by your private CA.- Parameters:
revocationConfiguration- Information about the Online Certificate Status Protocol (OCSP) configuration or certificate revocation list (CRL) created and maintained by your private CA. This parameter is required.- Returns:
this- See Also:
-
revocationConfiguration
@Stability(Stable) public CfnCertificateAuthorityPropsMixin.Builder revocationConfiguration(CfnCertificateAuthorityPropsMixin.RevocationConfigurationProperty revocationConfiguration) Information about the Online Certificate Status Protocol (OCSP) configuration or certificate revocation list (CRL) created and maintained by your private CA.- Parameters:
revocationConfiguration- Information about the Online Certificate Status Protocol (OCSP) configuration or certificate revocation list (CRL) created and maintained by your private CA. This parameter is required.- Returns:
this- See Also:
-
signingAlgorithm
@Stability(Stable) public CfnCertificateAuthorityPropsMixin.Builder signingAlgorithm(String signingAlgorithm) Name of the algorithm your private CA uses to sign certificate requests.This parameter should not be confused with the
SigningAlgorithmparameter used to sign certificates when they are issued.- Parameters:
signingAlgorithm- Name of the algorithm your private CA uses to sign certificate requests. This parameter is required.- Returns:
this- See Also:
-
subject
Structure that contains X.500 distinguished name information for your private CA.- Parameters:
subject- Structure that contains X.500 distinguished name information for your private CA. This parameter is required.- Returns:
this- See Also:
-
subject
@Stability(Stable) public CfnCertificateAuthorityPropsMixin.Builder subject(CfnCertificateAuthorityPropsMixin.SubjectProperty subject) Structure that contains X.500 distinguished name information for your private CA.- Parameters:
subject- Structure that contains X.500 distinguished name information for your private CA. This parameter is required.- Returns:
this- See Also:
-
tags
@Stability(Stable) public CfnCertificateAuthorityPropsMixin.Builder tags(List<? extends CfnTag> tags) Key-value pairs that will be attached to the new private CA.You can associate up to 50 tags with a private CA. For information using tags with IAM to manage permissions, see Controlling Access Using IAM Tags .
- Parameters:
tags- Key-value pairs that will be attached to the new private CA. This parameter is required.- Returns:
this- See Also:
-
type
Type of your private CA.- Parameters:
type- Type of your private CA. This parameter is required.- Returns:
this- See Also:
-
usageMode
Specifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly.Short-lived certificate validity is limited to seven days.
The default value is GENERAL_PURPOSE.
- Parameters:
usageMode- Specifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly. This parameter is required.- Returns:
this- See Also:
-
build
- Specified by:
buildin interfacesoftware.amazon.jsii.Builder<CfnCertificateAuthorityPropsMixin>- Returns:
- a newly built instance of
CfnCertificateAuthorityPropsMixin.
-