@pulumi/aws-native
Version:
The Pulumi AWS Cloud Control Provider enables you to build, deploy, and manage [any AWS resource that's supported by the AWS Cloud Control API](https://github.com/pulumi/pulumi-aws-native/blob/master/provider/cmd/pulumi-gen-aws-native/supported-types.txt)
285 lines • 11.9 kB
JavaScript
"use strict";
// *** WARNING: this file was generated by pulumi-language-nodejs. ***
// *** Do not edit by hand unless you're certain you know what you are doing! ***
Object.defineProperty(exports, "__esModule", { value: true });
exports.CertificateAuthority = void 0;
const pulumi = require("@pulumi/pulumi");
const utilities = require("../utilities");
/**
* Private certificate authority.
*
* ## Example Usage
* ### Example
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as aws_native from "@pulumi/aws-native";
*
* const rootCA = new aws_native.acmpca.CertificateAuthority("rootCA", {
* type: "ROOT",
* keyAlgorithm: "RSA_2048",
* signingAlgorithm: "SHA256WITHRSA",
* subject: {
* country: "US",
* organization: "string",
* organizationalUnit: "string",
* distinguishedNameQualifier: "string",
* state: "string",
* commonName: "123",
* serialNumber: "string",
* locality: "string",
* title: "string",
* surname: "string",
* givenName: "string",
* initials: "DG",
* pseudonym: "string",
* generationQualifier: "DBG",
* },
* revocationConfiguration: {
* crlConfiguration: {
* enabled: false,
* },
* },
* });
* const rootCACertificate = new aws_native.acmpca.Certificate("rootCACertificate", {
* certificateAuthorityArn: rootCA.id,
* certificateSigningRequest: rootCA.certificateSigningRequest,
* signingAlgorithm: "SHA256WITHRSA",
* templateArn: "arn:aws:acm-pca:::template/RootCACertificate/V1",
* validity: {
* type: "DAYS",
* value: 100,
* },
* });
* const rootCAActivation = new aws_native.acmpca.CertificateAuthorityActivation("rootCAActivation", {
* certificateAuthorityArn: rootCA.id,
* certificate: rootCACertificate.certificate,
* status: "ACTIVE",
* });
* const rootCAPermission = new aws_native.acmpca.Permission("rootCAPermission", {
* actions: [
* "IssueCertificate",
* "GetCertificate",
* "ListPermissions",
* ],
* certificateAuthorityArn: rootCA.id,
* principal: "acm.amazonaws.com",
* });
* const subordinateCAOne = new aws_native.acmpca.CertificateAuthority("subordinateCAOne", {
* type: "SUBORDINATE",
* keyAlgorithm: "RSA_2048",
* signingAlgorithm: "SHA256WITHRSA",
* subject: {
* country: "US",
* organization: "string",
* organizationalUnit: "string",
* distinguishedNameQualifier: "string",
* state: "string",
* commonName: "Sub1",
* serialNumber: "string",
* locality: "string",
* title: "string",
* surname: "string",
* givenName: "string",
* initials: "DG",
* pseudonym: "string",
* generationQualifier: "DBG",
* },
* revocationConfiguration: {},
* tags: [],
* });
* const subordinateCAOneCACertificate = new aws_native.acmpca.Certificate("subordinateCAOneCACertificate", {
* certificateAuthorityArn: rootCA.id,
* certificateSigningRequest: subordinateCAOne.certificateSigningRequest,
* signingAlgorithm: "SHA256WITHRSA",
* templateArn: "arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen3/V1",
* validity: {
* type: "DAYS",
* value: 90,
* },
* }, {
* dependsOn: [rootCAActivation],
* });
* const subordinateCAOneActivation = new aws_native.acmpca.CertificateAuthorityActivation("subordinateCAOneActivation", {
* certificateAuthorityArn: subordinateCAOne.id,
* certificate: subordinateCAOneCACertificate.certificate,
* certificateChain: rootCAActivation.completeCertificateChain,
* status: "ACTIVE",
* });
* const subordinateCAOnePermission = new aws_native.acmpca.Permission("subordinateCAOnePermission", {
* actions: [
* "IssueCertificate",
* "GetCertificate",
* "ListPermissions",
* ],
* certificateAuthorityArn: subordinateCAOne.id,
* principal: "acm.amazonaws.com",
* });
* const subordinateCATwo = new aws_native.acmpca.CertificateAuthority("subordinateCATwo", {
* type: "SUBORDINATE",
* keyAlgorithm: "RSA_2048",
* signingAlgorithm: "SHA256WITHRSA",
* subject: {
* country: "US",
* organization: "string",
* organizationalUnit: "string",
* distinguishedNameQualifier: "string",
* state: "string",
* serialNumber: "string",
* locality: "string",
* title: "string",
* surname: "string",
* givenName: "string",
* initials: "DG",
* pseudonym: "string",
* generationQualifier: "DBG",
* },
* tags: [
* {
* key: "Key1",
* value: "Value1",
* },
* {
* key: "Key2",
* value: "Value2",
* },
* ],
* });
* const subordinateCATwoCACertificate = new aws_native.acmpca.Certificate("subordinateCATwoCACertificate", {
* certificateAuthorityArn: subordinateCAOne.id,
* certificateSigningRequest: subordinateCATwo.certificateSigningRequest,
* signingAlgorithm: "SHA256WITHRSA",
* templateArn: "arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen2/V1",
* validity: {
* type: "DAYS",
* value: 80,
* },
* }, {
* dependsOn: [subordinateCAOneActivation],
* });
* const subordinateCATwoActivation = new aws_native.acmpca.CertificateAuthorityActivation("subordinateCATwoActivation", {
* certificateAuthorityArn: subordinateCATwo.id,
* certificate: subordinateCATwoCACertificate.certificate,
* certificateChain: subordinateCAOneActivation.completeCertificateChain,
* });
* const subordinateCATwoPermission = new aws_native.acmpca.Permission("subordinateCATwoPermission", {
* actions: [
* "IssueCertificate",
* "GetCertificate",
* "ListPermissions",
* ],
* certificateAuthorityArn: subordinateCATwo.id,
* principal: "acm.amazonaws.com",
* });
* const endEntityCertificate = new aws_native.acmpca.Certificate("endEntityCertificate", {
* certificateAuthorityArn: subordinateCATwo.id,
* certificateSigningRequest: `-----BEGIN CERTIFICATE REQUEST-----
* MIICvDCCAaQCAQAwdzELMAkGA1UEBhMCVVMxDTALBgNVBAgMBFV0YWgxDzANBgNV
* BAcMBkxpbmRvbjEWMBQGA1UECgwNRGlnaUNlcnQgSW5jLjERMA8GA1UECwwIRGln
* aUNlcnQxHTAbBgNVBAMMFGV4YW1wbGUuZGlnaWNlcnQuY29tMIIBIjANBgkqhkiG
* 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+To7d+2kPWeBv/orU3LVbJwDrSQbeKamCmo
* wp5bqDxIwV20zqRb7APUOKYoVEFFOEQs6T6gImnIolhbiH6m4zgZ/CPvWBOkZc+c
* 1Po2EmvBz+AD5sBdT5kzGQA6NbWyZGldxRthNLOs1efOhdnWFuhI162qmcflgpiI
* WDuwq4C9f+YkeJhNn9dF5+owm8cOQmDrV8NNdiTqin8q3qYAHHJRW28glJUCZkTZ
* wIaSR6crBQ8TbYNE0dc+Caa3DOIkz1EOsHWzTx+n0zKfqcbgXi4DJx+C1bjptYPR
* BPZL8DAeWuA8ebudVT44yEp82G96/Ggcf7F33xMxe0yc+Xa6owIDAQABoAAwDQYJ
* KoZIhvcNAQEFBQADggEBAB0kcrFccSmFDmxox0Ne01UIqSsDqHgL+XmHTXJwre6D
* hJSZwbvEtOK0G3+dr4Fs11WuUNt5qcLsx5a8uk4G6AKHMzuhLsJ7XZjgmQXGECpY
* Q4mC3yT3ZoCGpIXbw+iP3lmEEXgaQL0Tx5LFl/okKbKYwIqNiyKWOMj7ZR/wxWg/
* ZDGRs55xuoeLDJ/ZRFf9bI+IaCUd1YrfYcHIl3G87Av+r49YVwqRDT0VDV7uLgqn
* 29XI1PpVUNCPQGn9p/eX6Qo7vpDaPybRtA2R7XLKjQaF9oXWeCUqy1hvJac9QFO2
* 97Ob1alpHPoZ7mWiEuJwjBPii6a9M9G30nUo39lBi1w=
* -----END CERTIFICATE REQUEST-----`,
* signingAlgorithm: "SHA256WITHRSA",
* validity: {
* type: "DAYS",
* value: 70,
* },
* }, {
* dependsOn: [subordinateCATwoActivation],
* });
* export const completeCertificateChain = subordinateCATwoActivation.completeCertificateChain;
* export const certificateArn = endEntityCertificate.arn;
*
* ```
*/
class CertificateAuthority extends pulumi.CustomResource {
/**
* Get an existing CertificateAuthority resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name, id, opts) {
return new CertificateAuthority(name, undefined, { ...opts, id: id });
}
/**
* Returns true if the given object is an instance of CertificateAuthority. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj) {
if (obj === undefined || obj === null) {
return false;
}
return obj['__pulumiType'] === CertificateAuthority.__pulumiType;
}
/**
* Create a CertificateAuthority resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name, args, opts) {
let resourceInputs = {};
opts = opts || {};
if (!opts.id) {
if (args?.keyAlgorithm === undefined && !opts.urn) {
throw new Error("Missing required property 'keyAlgorithm'");
}
if (args?.signingAlgorithm === undefined && !opts.urn) {
throw new Error("Missing required property 'signingAlgorithm'");
}
if (args?.subject === undefined && !opts.urn) {
throw new Error("Missing required property 'subject'");
}
if (args?.type === undefined && !opts.urn) {
throw new Error("Missing required property 'type'");
}
resourceInputs["csrExtensions"] = args?.csrExtensions;
resourceInputs["keyAlgorithm"] = args?.keyAlgorithm;
resourceInputs["keyStorageSecurityStandard"] = args?.keyStorageSecurityStandard;
resourceInputs["revocationConfiguration"] = args?.revocationConfiguration;
resourceInputs["signingAlgorithm"] = args?.signingAlgorithm;
resourceInputs["subject"] = args?.subject;
resourceInputs["tags"] = args?.tags;
resourceInputs["type"] = args?.type;
resourceInputs["usageMode"] = args?.usageMode;
resourceInputs["arn"] = undefined /*out*/;
resourceInputs["certificateSigningRequest"] = undefined /*out*/;
}
else {
resourceInputs["arn"] = undefined /*out*/;
resourceInputs["certificateSigningRequest"] = undefined /*out*/;
resourceInputs["csrExtensions"] = undefined /*out*/;
resourceInputs["keyAlgorithm"] = undefined /*out*/;
resourceInputs["keyStorageSecurityStandard"] = undefined /*out*/;
resourceInputs["revocationConfiguration"] = undefined /*out*/;
resourceInputs["signingAlgorithm"] = undefined /*out*/;
resourceInputs["subject"] = undefined /*out*/;
resourceInputs["tags"] = undefined /*out*/;
resourceInputs["type"] = undefined /*out*/;
resourceInputs["usageMode"] = undefined /*out*/;
}
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
const replaceOnChanges = { replaceOnChanges: ["csrExtensions", "keyAlgorithm", "keyStorageSecurityStandard", "signingAlgorithm", "subject", "type", "usageMode"] };
opts = pulumi.mergeOptions(opts, replaceOnChanges);
super(CertificateAuthority.__pulumiType, name, resourceInputs, opts);
}
}
exports.CertificateAuthority = CertificateAuthority;
/** @internal */
CertificateAuthority.__pulumiType = 'aws-native:acmpca:CertificateAuthority';
//# sourceMappingURL=certificateAuthority.js.map