AWS Fundamentals Logo
AWS Fundamentals
L2 Construct

PrivateCertificate

A private certificate managed by AWS Certificate Manager.

Import

import { PrivateCertificate } from 'aws-cdk-lib/aws-certificatemanager';

Or use the module namespace:

import * as certificatemanager from 'aws-cdk-lib/aws-certificatemanager';
// certificatemanager.PrivateCertificate

Properties

Configuration passed to the constructor as PrivateCertificateProps.

certificateAuthorityRequired
ICertificateAuthorityRef

Private certificate authority (CA) that will be used to issue the certificate.

domainNameRequired
string

Fully-qualified domain name to request a private certificate for. May contain wildcards, such as ``*.domain.com``.

allowExportOptional
boolean

Enable or disable export of this certificate. If you issue an exportable public certificate, there is a charge at certificate issuance and again when the certificate renews. Ref: https://aws.amazon.com/certificate-manager/pricing

Default: false

keyAlgorithmOptional
KeyAlgorithm

Specifies the algorithm of the public and private key pair that your certificate uses to encrypt data. When you request a private PKI certificate signed by a CA from AWS Private CA, the specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key.

Default: KeyAlgorithm.RSA_2048

subjectAlternativeNamesOptional
string[]

Alternative domain names on your private certificate. Use this to register alternative domain names that represent the same site.

Default: - No additional FQDNs will be included as alternative domain names.

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter