AWS::IoT::CertificateProvider - AWS CloudFormation

AWS::IoT::CertificateProvider

Creates a certificate provider. AWS IoT Core certificate provider lets you customize how to sign a certificate signing request (CSR) in fleet provisioning. For more information, see Self-managed certificate signing using AWS IoT Corecertificate provider from the AWS IoT Core Developer Guide.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{ "Type" : "AWS::IoT::CertificateProvider", "Properties" : { "AccountDefaultForOperations" : [ String, ... ], "CertificateProviderName" : String, "LambdaFunctionArn" : String, "Tags" : [ Tag, ... ] } }

YAML

Type: AWS::IoT::CertificateProvider Properties: AccountDefaultForOperations: - String CertificateProviderName: String LambdaFunctionArn: String Tags: - Tag

Properties

AccountDefaultForOperations

A list of the operations that the certificate provider will use to generate certificates. Valid value: CreateCertificateFromCsr.

Required: Yes

Type: Array of String

Minimum: 1

Maximum: 1

Update requires: No interruption

CertificateProviderName

The name of the certificate provider.

Required: No

Type: String

Pattern: [\w=,@-]+

Minimum: 1

Maximum: 128

Update requires: Replacement

LambdaFunctionArn

The ARN of the Lambda function.

Required: Yes

Type: String

Minimum: 1

Maximum: 170

Update requires: No interruption

Tags

Metadata that can be used to manage the certificate provider.

Required: No

Type: Array of Tag

Maximum: 50

Update requires: No interruption

Return values

Ref

When you pass the logical ID of this resource to the intrinsic Ref function, Ref returns the ID of the certificate provider. For example:

{ "Ref": "MyCertificateProvider" }

A value similar to the following is returned:

a1234567b89c012d3e4fg567hij8k9l01mno1p23q45678901rs234567890t1u2

For more information about using the Ref function, see Ref.

Fn::GetAtt

The Fn::GetAtt intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the Fn::GetAtt intrinsic function, see Fn::GetAtt.

Arn

Returns the Amazon Resource Name (ARN) for the certificate. For example:

{ "Fn::GetAtt": ["MyCertificateProvider", "Arn"] }

A value similar to the following is returned:

arn:aws:iot:ap-southeast-2:123456789012:certprovider/my-certificate-provider