Package com.pulumi.aws.cloudfront.inputs

Class DistributionViewerCertificateArgs

  • public final class DistributionViewerCertificateArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • acmCertificateArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> acmCertificateArn()
        Returns:
        ARN of the [AWS Certificate Manager](https://aws.amazon.com/certificate-manager/) certificate that you wish to use with this distribution. Specify this, `cloudfrontDefaultCertificate`, or `iamCertificateId`. The ACM certificate must be in US-EAST-1.

      • cloudfrontDefaultCertificate

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> cloudfrontDefaultCertificate()
        Returns:
        `true` if you want viewers to use HTTPS to request your objects and you're using the CloudFront domain name for your distribution. Specify this, `acmCertificateArn`, or `iamCertificateId`.

      • iamCertificateId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> iamCertificateId()
        Returns:
        IAM certificate identifier of the custom viewer certificate for this distribution if you are using a custom domain. Specify this, `acmCertificateArn`, or `cloudfrontDefaultCertificate`.

      • minimumProtocolVersion

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> minimumProtocolVersion()
        Returns:
        Minimum version of the SSL protocol that you want CloudFront to use for HTTPS connections. Can only be set if `cloudfrontDefaultCertificate = false`. See all possible values in [this](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html) table under "Security policy." Some examples include: `TLSv1.2_2019` and `TLSv1.2_2021`. Default: `TLSv1`. **NOTE**: If you are using a custom certificate (specified with `acmCertificateArn` or `iamCertificateId`), and have specified `sni-only` in `sslSupportMethod`, `TLSv1` or later must be specified. If you have specified `vip` in `sslSupportMethod`, only `SSLv3` or `TLSv1` can be specified. If you have specified `cloudfrontDefaultCertificate`, `TLSv1` must be specified.

      • sslSupportMethod

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> sslSupportMethod()
        Returns:
        How you want CloudFront to serve HTTPS requests. One of `vip`, `sni-only`, or `static-ip`. Required if you specify `acmCertificateArn` or `iamCertificateId`. **NOTE:** `vip` causes CloudFront to use a dedicated IP address and may incur extra charges.