AWS Fundamentals Logo
AWS Fundamentals
L1 ConstructAWS::ACMPCA::Certificate

CfnCertificate

The `AWS::ACMPCA::Certificate` resource is used to issue a certificate using your private certificate authority. For more information, see the [IssueCertificate](https://docs.aws.amazon.com/privateca/latest/APIReference/API_IssueCertificate.html) action.

Import

import { CfnCertificate } from 'aws-cdk-lib/aws-acmpca';

Or use the module namespace:

import * as acmpca from 'aws-cdk-lib/aws-acmpca';
// acmpca.CfnCertificate

Properties

Configuration passed to the constructor as CfnCertificateProps.

certificateAuthorityArnRequired
string | ICertificateAuthorityRef

The Amazon Resource Name (ARN) for the private CA issues the certificate.

certificateSigningRequestRequired
string

The certificate signing request (CSR) for the certificate.

signingAlgorithmRequired
string

The name of the algorithm that will be used to sign the certificate to be issued. This parameter should not be confused with the `SigningAlgorithm` parameter used to sign a CSR in the `CreateCertificateAuthority` action. > The specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key.

validityRequired
IResolvable | ValidityProperty

The period of time during which the certificate will be valid.

apiPassthroughOptional
IResolvable | ApiPassthroughProperty

Specifies X.509 certificate information to be included in the issued certificate. An `APIPassthrough` or `APICSRPassthrough` template variant must be selected, or else this parameter is ignored.

templateArnOptional
string | ICertificateAuthorityRef

Specifies a custom configuration template to use when issuing a certificate. If this parameter is not provided, AWS Private CA defaults to the `EndEntityCertificate/V1` template. For more information about AWS Private CA templates, see [Using Templates](https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html) .

validityNotBeforeOptional
IResolvable | ValidityProperty

Information describing the start of the validity period of the certificate. This parameter sets the “Not Before" date for the certificate. By default, when issuing a certificate, AWS Private CA sets the "Not Before" date to the issuance time minus 60 minutes. This compensates for clock inconsistencies across computer systems. The `ValidityNotBefore` parameter can be used to customize the “Not Before” value. Unlike the `Validity` parameter, the `ValidityNotBefore` parameter is optional. The `ValidityNotBefore` value is expressed as an explicit date and time, using the `Validity` type value `ABSOLUTE` .

CloudFormation Resource

This L1 construct maps directly to the following CloudFormation resource type.

AWS::ACMPCA::CertificateView in CloudFormation Explorer

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Quick Facts

LevelL1 (CloudFormation)
Moduleaws-acmpca
CFN TypeAWS::ACMPCA::Certificate
Properties7

Related Constructs

Explore This Service

External Links