Package com.pulumi.aws.acmpca

Class CertificateAuthorityCertificate

  • public class CertificateAuthorityCertificate
extends com.pulumi.resources.CustomResource
    Associates a certificate with an AWS Certificate Manager Private Certificate Authority (ACM PCA Certificate Authority). An ACM PCA Certificate Authority is unable to issue certificates until it has a certificate associated with it. A root level ACM PCA Certificate Authority is able to self-sign its own root certificate. ## Example Usage ### Self-Signed Root Certificate Authority Certificate <!--Start PulumiCodeChooser --> 
     
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.acmpca.CertificateAuthority;
 import com.pulumi.aws.acmpca.CertificateAuthorityArgs;
 import com.pulumi.aws.acmpca.inputs.CertificateAuthorityCertificateAuthorityConfigurationArgs;
 import com.pulumi.aws.acmpca.inputs.CertificateAuthorityCertificateAuthorityConfigurationSubjectArgs;
 import com.pulumi.aws.AwsFunctions;
 import com.pulumi.aws.inputs.GetPartitionArgs;
 import com.pulumi.aws.acmpca.Certificate;
 import com.pulumi.aws.acmpca.CertificateArgs;
 import com.pulumi.aws.acmpca.inputs.CertificateValidityArgs;
 import com.pulumi.aws.acmpca.CertificateAuthorityCertificate;
 import com.pulumi.aws.acmpca.CertificateAuthorityCertificateArgs;
 import java.util.List;
 import java.util.ArrayList;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var exampleCertificateAuthority = new CertificateAuthority("exampleCertificateAuthority", CertificateAuthorityArgs.builder()        
             .type("ROOT")
             .certificateAuthorityConfiguration(CertificateAuthorityCertificateAuthorityConfigurationArgs.builder()
                 .keyAlgorithm("RSA_4096")
                 .signingAlgorithm("SHA512WITHRSA")
                 .subject(CertificateAuthorityCertificateAuthorityConfigurationSubjectArgs.builder()
                     .commonName("example.com")
                     .build())
                 .build())
             .build());
 
         final var current = AwsFunctions.getPartition();
 
         var exampleCertificate = new Certificate("exampleCertificate", CertificateArgs.builder()        
             .certificateAuthorityArn(exampleCertificateAuthority.arn())
             .certificateSigningRequest(exampleCertificateAuthority.certificateSigningRequest())
             .signingAlgorithm("SHA512WITHRSA")
             .templateArn(String.format("arn:%s:acm-pca:::template/RootCACertificate/V1", current.applyValue(getPartitionResult -> getPartitionResult.partition())))
             .validity(CertificateValidityArgs.builder()
                 .type("YEARS")
                 .value(1)
                 .build())
             .build());
 
         var example = new CertificateAuthorityCertificate("example", CertificateAuthorityCertificateArgs.builder()        
             .certificateAuthorityArn(exampleCertificateAuthority.arn())
             .certificate(exampleCertificate.certificate())
             .certificateChain(exampleCertificate.certificateChain())
             .build());
 
     }
 }
    <!--End PulumiCodeChooser --> ### Certificate for Subordinate Certificate Authority Note that the certificate for the subordinate certificate authority must be issued by the root certificate authority using a signing request from the subordinate certificate authority. <!--Start PulumiCodeChooser --> 
     
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.acmpca.CertificateAuthority;
 import com.pulumi.aws.acmpca.CertificateAuthorityArgs;
 import com.pulumi.aws.acmpca.inputs.CertificateAuthorityCertificateAuthorityConfigurationArgs;
 import com.pulumi.aws.acmpca.inputs.CertificateAuthorityCertificateAuthorityConfigurationSubjectArgs;
 import com.pulumi.aws.AwsFunctions;
 import com.pulumi.aws.inputs.GetPartitionArgs;
 import com.pulumi.aws.acmpca.Certificate;
 import com.pulumi.aws.acmpca.CertificateArgs;
 import com.pulumi.aws.acmpca.inputs.CertificateValidityArgs;
 import com.pulumi.aws.acmpca.CertificateAuthorityCertificate;
 import com.pulumi.aws.acmpca.CertificateAuthorityCertificateArgs;
 import java.util.List;
 import java.util.ArrayList;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var subordinateCertificateAuthority = new CertificateAuthority("subordinateCertificateAuthority", CertificateAuthorityArgs.builder()        
             .type("SUBORDINATE")
             .certificateAuthorityConfiguration(CertificateAuthorityCertificateAuthorityConfigurationArgs.builder()
                 .keyAlgorithm("RSA_2048")
                 .signingAlgorithm("SHA512WITHRSA")
                 .subject(CertificateAuthorityCertificateAuthorityConfigurationSubjectArgs.builder()
                     .commonName("sub.example.com")
                     .build())
                 .build())
             .build());
 
         var root = new CertificateAuthority("root");
 
         final var current = AwsFunctions.getPartition();
 
         var subordinateCertificate = new Certificate("subordinateCertificate", CertificateArgs.builder()        
             .certificateAuthorityArn(root.arn())
             .certificateSigningRequest(subordinateCertificateAuthority.certificateSigningRequest())
             .signingAlgorithm("SHA512WITHRSA")
             .templateArn(String.format("arn:%s:acm-pca:::template/SubordinateCACertificate_PathLen0/V1", current.applyValue(getPartitionResult -> getPartitionResult.partition())))
             .validity(CertificateValidityArgs.builder()
                 .type("YEARS")
                 .value(1)
                 .build())
             .build());
 
         var subordinate = new CertificateAuthorityCertificate("subordinate", CertificateAuthorityCertificateArgs.builder()        
             .certificateAuthorityArn(subordinateCertificateAuthority.arn())
             .certificate(subordinateCertificate.certificate())
             .certificateChain(subordinateCertificate.certificateChain())
             .build());
 
         var rootCertificateAuthorityCertificate = new CertificateAuthorityCertificate("rootCertificateAuthorityCertificate");
 
         var rootCertificate = new Certificate("rootCertificate");
 
     }
 }
    <!--End PulumiCodeChooser -->

    • Nested Class Summary

      • Nested classes/interfaces inherited from class com.pulumi.resources.CustomResource

        com.pulumi.resources.CustomResource.CustomResourceInternal

      • Nested classes/interfaces inherited from class com.pulumi.resources.Resource

        com.pulumi.resources.Resource.LazyField<T extends java.lang.Object>, com.pulumi.resources.Resource.LazyFields, com.pulumi.resources.Resource.ResourceInternal

    • Field Summary

      • Fields inherited from class com.pulumi.resources.Resource

        childResources, remote

    • Method Summary

      All Methods Static Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      com.pulumi.core.Output<java.lang.String> certificate()  
      com.pulumi.core.Output<java.lang.String> certificateAuthorityArn()  
      com.pulumi.core.Output<java.util.Optional<java.lang.String>> certificateChain()  
      static CertificateAuthorityCertificate get​(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, CertificateAuthorityCertificateState state, com.pulumi.resources.CustomResourceOptions options)
      Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.

      • Methods inherited from class com.pulumi.resources.CustomResource

        getId, id, idFuture

      • Methods inherited from class com.pulumi.resources.Resource

        getChildResources, getResourceName, getResourceType, getUrn, pulumiChildResources, pulumiResourceName, pulumiResourceType, urn

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Constructor Detail

      • CertificateAuthorityCertificate

        public CertificateAuthorityCertificate​(java.lang.String name)
        Parameters:
        name - The _unique_ name of the resulting resource.

      • CertificateAuthorityCertificate

        public CertificateAuthorityCertificate​(java.lang.String name,
                                       CertificateAuthorityCertificateArgs args)
        Parameters:
        name - The _unique_ name of the resulting resource.
        args - The arguments to use to populate this resource's properties.

      • CertificateAuthorityCertificate

        public CertificateAuthorityCertificate​(java.lang.String name,
                                       CertificateAuthorityCertificateArgs args,
                                       @Nullable
                                       com.pulumi.resources.CustomResourceOptions options)
        Parameters:
        name - The _unique_ name of the resulting resource.
        args - The arguments to use to populate this resource's properties.
        options - A bag of options that control this resource's behavior.

    • Method Detail

      • certificate

        public com.pulumi.core.Output<java.lang.String> certificate()
        Returns:
        PEM-encoded certificate for the Certificate Authority.

      • certificateAuthorityArn

        public com.pulumi.core.Output<java.lang.String> certificateAuthorityArn()
        Returns:
        ARN of the Certificate Authority.

      • certificateChain

        public com.pulumi.core.Output<java.util.Optional<java.lang.String>> certificateChain()
        Returns:
        PEM-encoded certificate chain that includes any intermediate certificates and chains up to root CA. Required for subordinate Certificate Authorities. Not allowed for root Certificate Authorities.

      • get

        public static CertificateAuthorityCertificate get​(java.lang.String name,
                                                  com.pulumi.core.Output<java.lang.String> id,
                                                  @Nullable
                                                  CertificateAuthorityCertificateState state,
                                                  @Nullable
                                                  com.pulumi.resources.CustomResourceOptions options)
        Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
        Parameters:
        name - The _unique_ name of the resulting resource.
        id - The _unique_ provider ID of the resource to lookup.
        state -
        options - Optional settings to control the behavior of the CustomResource.