UNPKG

@pulumi/aws-native

Version:

The Pulumi AWS Cloud Control Provider enables you to build, deploy, and manage [any AWS resource that's supported by the AWS Cloud Control API](https://github.com/pulumi/pulumi-aws-native/blob/master/provider/cmd/pulumi-gen-aws-native/supported-types.txt)

88 lines (87 loc) 4.07 kB
import * as pulumi from "@pulumi/pulumi"; /** * Associates an AWS Identity and Access Management (IAM) role with an AWS Certificate Manager (ACM) certificate. This association is based on Amazon Resource Names and it enables the certificate to be used by the ACM for Nitro Enclaves application inside an enclave. * * ## Example Usage * ### Example * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws_native from "@pulumi/aws-native"; * * const myEnclaveCertificateIamRoleAssociation = new aws_native.ec2.EnclaveCertificateIamRoleAssociation("myEnclaveCertificateIamRoleAssociation", { * certificateArn: "arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE", * roleArn: "arn:aws:iam::123456789012:role/my-acm-role", * }); * * ``` * ### Example * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as aws_native from "@pulumi/aws-native"; * * const myCertAssociation = new aws_native.ec2.EnclaveCertificateIamRoleAssociation("myCertAssociation", { * certificateArn: "arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE", * roleArn: "arn:aws:iam::123456789012:role/my-acm-role", * }); * * ``` */ export declare class EnclaveCertificateIamRoleAssociation extends pulumi.CustomResource { /** * Get an existing EnclaveCertificateIamRoleAssociation resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): EnclaveCertificateIamRoleAssociation; /** * Returns true if the given object is an instance of EnclaveCertificateIamRoleAssociation. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is EnclaveCertificateIamRoleAssociation; /** * The Amazon Resource Name (ARN) of the ACM certificate with which to associate the IAM role. */ readonly certificateArn: pulumi.Output<string>; /** * The name of the Amazon S3 bucket to which the certificate was uploaded. */ readonly certificateS3BucketName: pulumi.Output<string>; /** * The Amazon S3 object key where the certificate, certificate chain, and encrypted private key bundle are stored. */ readonly certificateS3ObjectKey: pulumi.Output<string>; /** * The ID of the AWS KMS CMK used to encrypt the private key of the certificate. */ readonly encryptionKmsKeyId: pulumi.Output<string>; /** * The Amazon Resource Name (ARN) of the IAM role to associate with the ACM certificate. You can associate up to 16 IAM roles with an ACM certificate. */ readonly roleArn: pulumi.Output<string>; /** * Create a EnclaveCertificateIamRoleAssociation resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: EnclaveCertificateIamRoleAssociationArgs, opts?: pulumi.CustomResourceOptions); } /** * The set of arguments for constructing a EnclaveCertificateIamRoleAssociation resource. */ export interface EnclaveCertificateIamRoleAssociationArgs { /** * The Amazon Resource Name (ARN) of the ACM certificate with which to associate the IAM role. */ certificateArn: pulumi.Input<string>; /** * The Amazon Resource Name (ARN) of the IAM role to associate with the ACM certificate. You can associate up to 16 IAM roles with an ACM certificate. */ roleArn: pulumi.Input<string>; }