Class CertificateAuthorityRevocationConfigurationCrlConfiguration


  • public final class CertificateAuthorityRevocationConfigurationCrlConfiguration
    extends java.lang.Object
    • Method Detail

      • customCname

        public java.util.Optional<java.lang.String> customCname()
        Returns:
        Name inserted into the certificate CRL Distribution Points extension that enables the use of an alias for the CRL distribution point. Use this value if you don't want the name of your S3 bucket to be public. Must be less than or equal to 253 characters in length.
      • enabled

        public java.util.Optional<java.lang.Boolean> enabled()
        Returns:
        Boolean value that specifies whether certificate revocation lists (CRLs) are enabled. Defaults to `false`.
      • expirationInDays

        public java.util.Optional<java.lang.Integer> expirationInDays()
        Returns:
        Number of days until a certificate expires. Must be between 1 and 5000.
      • s3BucketName

        public java.util.Optional<java.lang.String> s3BucketName()
        Returns:
        Name of the S3 bucket that contains the CRL. If you do not provide a value for the `custom_cname` argument, the name of your S3 bucket is placed into the CRL Distribution Points extension of the issued certificate. You must specify a bucket policy that allows ACM PCA to write the CRL to your bucket. Must be between 3 and 255 characters in length.
      • s3ObjectAcl

        public java.util.Optional<java.lang.String> s3ObjectAcl()
        Returns:
        Determines whether the CRL will be publicly readable or privately held in the CRL Amazon S3 bucket. Defaults to `PUBLIC_READ`.