Package com.pulumi.aws.acmpca.inputs

Class CertificateAuthorityState

  • public final class CertificateAuthorityState
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • arn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> arn()
        Returns:
        ARN of the certificate authority.

      • certificate

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> certificate()
        Returns:
        Base64-encoded certificate authority (CA) certificate. Only available after the certificate authority certificate has been imported.

      • certificateChain

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> certificateChain()
        Returns:
        Base64-encoded certificate chain that includes any intermediate certificates and chains up to root on-premises certificate that you used to sign your private CA certificate. The chain does not include your private CA certificate. Only available after the certificate authority certificate has been imported.

      • certificateSigningRequest

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> certificateSigningRequest()
        Returns:
        The base64 PEM-encoded certificate signing request (CSR) for your private CA certificate.

      • enabled

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> enabled()
        Returns:
        Whether the certificate authority is enabled or disabled. Defaults to `true`. Can only be disabled if the CA is in an `ACTIVE` state.

      • keyStorageSecurityStandard

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> keyStorageSecurityStandard()
        Returns:
        Cryptographic key management compliance standard used for handling CA keys. Defaults to `FIPS_140_2_LEVEL_3_OR_HIGHER`. Valid values: `FIPS_140_2_LEVEL_3_OR_HIGHER` and `FIPS_140_2_LEVEL_2_OR_HIGHER`. Supported standard for each region can be found in the [Storage and security compliance of AWS Private CA private keys Documentation](https://docs.aws.amazon.com/privateca/latest/userguide/data-protection.html#private-keys).

      • notAfter

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> notAfter()
        Returns:
        Date and time after which the certificate authority is not valid. Only available after the certificate authority certificate has been imported.

      • notBefore

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> notBefore()
        Returns:
        Date and time before which the certificate authority is not valid. Only available after the certificate authority certificate has been imported.

      • permanentDeletionTimeInDays

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> permanentDeletionTimeInDays()
        Returns:
        Number of days to make a CA restorable after it has been deleted, must be between 7 to 30 days, with default to 30 days.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • serial

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> serial()
        Returns:
        Serial number of the certificate authority. Only available after the certificate authority certificate has been imported.

      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Key-value map of user-defined tags that are attached to the certificate authority. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

      • tagsAll

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tagsAll()
        Returns:
        Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.

      • type

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> type()
        Returns:
        Type of the certificate authority. Defaults to `SUBORDINATE`. Valid values: `ROOT` and `SUBORDINATE`.

      • usageMode

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> usageMode()
        Returns:
        Specifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly. Short-lived certificate validity is limited to seven days. Defaults to `GENERAL_PURPOSE`. Valid values: `GENERAL_PURPOSE` and `SHORT_LIVED_CERTIFICATE`.