AWS::PCAConnectorSCEP::Challenge - AWS CloudFormation

AWS::PCAConnectorSCEP::Challenge

For general-purpose connectors. Creates a challenge password for the specified connector. The SCEP protocol uses a challenge password to authenticate a request before issuing a certificate from a certificate authority (CA). Your SCEP clients include the challenge password as part of their certificate request to Connector for SCEP. To retrieve the connector Amazon Resource Names (ARNs) for the connectors in your account, call ListConnectors.

To create additional challenge passwords for the connector, call CreateChallenge again. We recommend frequently rotating your challenge passwords.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{ "Type" : "AWS::PCAConnectorSCEP::Challenge", "Properties" : { "ConnectorArn" : String, "Tags" : {Key: Value, ...} } }

YAML

Type: AWS::PCAConnectorSCEP::Challenge Properties: ConnectorArn: String Tags: Key: Value

Properties

ConnectorArn

The Amazon Resource Name (ARN) of the connector.

Required: Yes

Type: String

Pattern: ^arn:aws(-[a-z]+)*:pca-connector-scep:[a-z]+(-[a-z]+)+-[1-9]\d*:\d{12}:connector\/[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}$

Minimum: 5

Maximum: 200

Update requires: Replacement

Tags

Property description not available.

Required: No

Type: Object of String

Pattern: .+

Update requires: No interruption

Return values

Ref

Fn::GetAtt

ChallengeArn

The Amazon Resource Name (ARN) of the challenge.