interface CertificateProps

Language	Type name
.NET	Amazon.CDK.AWS.CertificateManager.CertificateProps
Java	software.amazon.awscdk.services.certificatemanager.CertificateProps
Python	aws_cdk.aws_certificatemanager.CertificateProps
TypeScript (source)	@aws-cdk/aws-certificatemanager » CertificateProps

Properties for your certificate.

Example

import * as cloudwatch from '@aws-cdk/aws-cloudwatch';

declare const myHostedZone: route53.HostedZone;
const certificate = new acm.Certificate(this, 'Certificate', {
  domainName: 'hello.example.com',
  validation: acm.CertificateValidation.fromDns(myHostedZone),
});
certificate.metricDaysToExpiry().createAlarm(this, 'Alarm', {
  comparisonOperator: cloudwatch.ComparisonOperator.LESS_THAN_THRESHOLD,
  evaluationPeriods: 1,
  threshold: 45, // Automatic rotation happens between 60 and 45 days before expiry
});

Properties

Name	Type	Description
domainName	string	Fully-qualified domain name to request a certificate for.
subjectAlternativeNames?	string[]	Alternative domain names on your certificate.
validation?	CertificateValidation	How to validate this certificate.
validationDomains?⚠️	{ [string]: string }	What validation domain to use for every requested domain.
validationMethod?⚠️	ValidationMethod	Validation method used to assert domain ownership.

---

domainName

Type: string

Fully-qualified domain name to request a certificate for.

May contain wildcards, such as *.domain.com.

---

subjectAlternativeNames?

Type: string[] (optional, default: No additional FQDNs will be included as alternative domain names.)

Alternative domain names on your certificate.

Use this to register alternative domain names that represent the same site.

---

validation?

Type: CertificateValidation (optional, default: CertificateValidation.fromEmail())

How to validate this certificate.

---

validationDomains?⚠️

⚠️ Deprecated: use validation instead.

Type: { [string]: string } (optional, default: Apex domain is used for every domain that's not overridden.)

What validation domain to use for every requested domain.

Has to be a superdomain of the requested domain.

---

validationMethod?⚠️

⚠️ Deprecated: use validation instead.

Type: ValidationMethod (optional, default: ValidationMethod.EMAIL)

Validation method used to assert domain ownership.