AWS::IoT::CertificateProvider
Creates a certificate provider. AWS IoT Core certificate provider lets you customize how to sign a certificate signing request (CSR) in fleet provisioning. For more information, see Self-managed certificate signing using AWS IoT Corecertificate provider from the AWS IoT Core Developer Guide.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "Type" : "AWS::IoT::CertificateProvider", "Properties" : { "AccountDefaultForOperations" :
[ String, ... ]
, "CertificateProviderName" :String
, "LambdaFunctionArn" :String
, "Tags" :[ Tag, ... ]
} }
YAML
Type: AWS::IoT::CertificateProvider Properties: AccountDefaultForOperations:
- String
CertificateProviderName:String
LambdaFunctionArn:String
Tags:- Tag
Properties
AccountDefaultForOperations
-
A list of the operations that the certificate provider will use to generate certificates. Valid value:
CreateCertificateFromCsr
.Required: Yes
Type: Array of String
Minimum:
1
Maximum:
1
Update requires: No interruption
CertificateProviderName
-
The name of the certificate provider.
Required: No
Type: String
Pattern:
[\w=,@-]+
Minimum:
1
Maximum:
128
Update requires: Replacement
LambdaFunctionArn
-
The ARN of the Lambda function.
Required: Yes
Type: String
Minimum:
1
Maximum:
170
Update requires: No interruption
-
Metadata that can be used to manage the certificate provider.
Required: No
Type: Array of Tag
Maximum:
50
Update requires: No interruption
Return values
Ref
When you pass the logical ID of this resource to the intrinsic Ref
function, Ref
returns the ID of the certificate provider. For example:
{ "Ref": "MyCertificateProvider" }
A value similar to the following is returned:
a1234567b89c012d3e4fg567hij8k9l01mno1p23q45678901rs234567890t1u2
For more information about using the Ref
function, see Ref
.
Fn::GetAtt
The Fn::GetAtt
intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.
For more information about using the Fn::GetAtt
intrinsic function, see Fn::GetAtt
.
Arn
-
Returns the Amazon Resource Name (ARN) for the certificate. For example:
{ "Fn::GetAtt": ["MyCertificateProvider", "Arn"] }
A value similar to the following is returned:
arn:aws:iot:ap-southeast-2:123456789012:certprovider/my-certificate-provider