A private certificate managed by AWS Certificate Manager.
import { PrivateCertificate } from 'aws-cdk-lib/aws-certificatemanager';Or use the module namespace:
import * as certificatemanager from 'aws-cdk-lib/aws-certificatemanager';
// certificatemanager.PrivateCertificateConfiguration passed to the constructor as PrivateCertificateProps.
certificateAuthorityRequiredICertificateAuthorityRefPrivate certificate authority (CA) that will be used to issue the certificate.
domainNameRequiredstringFully-qualified domain name to request a private certificate for. May contain wildcards, such as ``*.domain.com``.
allowExportOptionalbooleanEnable or disable export of this certificate. If you issue an exportable public certificate, there is a charge at certificate issuance and again when the certificate renews. Ref: https://aws.amazon.com/certificate-manager/pricing
Default: false
keyAlgorithmOptionalKeyAlgorithmSpecifies the algorithm of the public and private key pair that your certificate uses to encrypt data. When you request a private PKI certificate signed by a CA from AWS Private CA, the specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key.
Default: KeyAlgorithm.RSA_2048
subjectAlternativeNamesOptionalstring[]Alternative domain names on your private certificate. Use this to register alternative domain names that represent the same site.
Default: - No additional FQDNs will be included as alternative domain names.
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to Newsletteraws-certificatemanager