Package com.pulumi.aws.acmpca

Class CertificateAuthorityArgs.Builder

  • Enclosing class:
    CertificateAuthorityArgs
    public static final class CertificateAuthorityArgs.Builder
extends java.lang.Object

    • Method Detail

      • enabled

        public CertificateAuthorityArgs.Builder enabled​(@Nullable
                                                com.pulumi.core.Output<java.lang.Boolean> enabled)
        Parameters:
        enabled - Whether the certificate authority is enabled or disabled. Defaults to `true`. Can only be disabled if the CA is in an `ACTIVE` state.
        Returns:
        builder

      • enabled

        public CertificateAuthorityArgs.Builder enabled​(java.lang.Boolean enabled)
        Parameters:
        enabled - Whether the certificate authority is enabled or disabled. Defaults to `true`. Can only be disabled if the CA is in an `ACTIVE` state.
        Returns:
        builder

      • keyStorageSecurityStandard

        public CertificateAuthorityArgs.Builder keyStorageSecurityStandard​(@Nullable
                                                                   com.pulumi.core.Output<java.lang.String> keyStorageSecurityStandard)
        Parameters:
        keyStorageSecurityStandard - Cryptographic key management compliance standard used for handling CA keys. Defaults to `FIPS_140_2_LEVEL_3_OR_HIGHER`. Valid values: `FIPS_140_2_LEVEL_3_OR_HIGHER` and `FIPS_140_2_LEVEL_2_OR_HIGHER`. Supported standard for each region can be found in the [Storage and security compliance of AWS Private CA private keys Documentation](https://docs.aws.amazon.com/privateca/latest/userguide/data-protection.html#private-keys).
        Returns:
        builder

      • keyStorageSecurityStandard

        public CertificateAuthorityArgs.Builder keyStorageSecurityStandard​(java.lang.String keyStorageSecurityStandard)
        Parameters:
        keyStorageSecurityStandard - Cryptographic key management compliance standard used for handling CA keys. Defaults to `FIPS_140_2_LEVEL_3_OR_HIGHER`. Valid values: `FIPS_140_2_LEVEL_3_OR_HIGHER` and `FIPS_140_2_LEVEL_2_OR_HIGHER`. Supported standard for each region can be found in the [Storage and security compliance of AWS Private CA private keys Documentation](https://docs.aws.amazon.com/privateca/latest/userguide/data-protection.html#private-keys).
        Returns:
        builder

      • permanentDeletionTimeInDays

        public CertificateAuthorityArgs.Builder permanentDeletionTimeInDays​(@Nullable
                                                                    com.pulumi.core.Output<java.lang.Integer> permanentDeletionTimeInDays)
        Parameters:
        permanentDeletionTimeInDays - Number of days to make a CA restorable after it has been deleted, must be between 7 to 30 days, with default to 30 days.
        Returns:
        builder

      • permanentDeletionTimeInDays

        public CertificateAuthorityArgs.Builder permanentDeletionTimeInDays​(java.lang.Integer permanentDeletionTimeInDays)
        Parameters:
        permanentDeletionTimeInDays - Number of days to make a CA restorable after it has been deleted, must be between 7 to 30 days, with default to 30 days.
        Returns:
        builder

      • tags

        public CertificateAuthorityArgs.Builder tags​(@Nullable
                                             com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tags)
        Parameters:
        tags - Key-value map of user-defined tags that are attached to the certificate authority. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • tags

        public CertificateAuthorityArgs.Builder tags​(java.util.Map<java.lang.String,​java.lang.String> tags)
        Parameters:
        tags - Key-value map of user-defined tags that are attached to the certificate authority. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • type

        public CertificateAuthorityArgs.Builder type​(@Nullable
                                             com.pulumi.core.Output<java.lang.String> type)
        Parameters:
        type - Type of the certificate authority. Defaults to `SUBORDINATE`. Valid values: `ROOT` and `SUBORDINATE`.
        Returns:
        builder

      • type

        public CertificateAuthorityArgs.Builder type​(java.lang.String type)
        Parameters:
        type - Type of the certificate authority. Defaults to `SUBORDINATE`. Valid values: `ROOT` and `SUBORDINATE`.
        Returns:
        builder

      • usageMode

        public CertificateAuthorityArgs.Builder usageMode​(@Nullable
                                                  com.pulumi.core.Output<java.lang.String> usageMode)
        Parameters:
        usageMode - Specifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly. Short-lived certificate validity is limited to seven days. Defaults to `GENERAL_PURPOSE`. Valid values: `GENERAL_PURPOSE` and `SHORT_LIVED_CERTIFICATE`.
        Returns:
        builder

      • usageMode

        public CertificateAuthorityArgs.Builder usageMode​(java.lang.String usageMode)
        Parameters:
        usageMode - Specifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly. Short-lived certificate validity is limited to seven days. Defaults to `GENERAL_PURPOSE`. Valid values: `GENERAL_PURPOSE` and `SHORT_LIVED_CERTIFICATE`.
        Returns:
        builder