Cluster - AWS CloudHSM

Cluster

Contains information about an AWS CloudHSM cluster.

Contents

BackupPolicy

The cluster's backup policy.

Type: String

Valid Values: DEFAULT

Required: No

BackupRetentionPolicy

A policy that defines how the service retains backups.

Type: BackupRetentionPolicy object

Required: No

Certificates

Contains one or more certificates or a certificate signing request (CSR).

Type: Certificates object

Required: No

ClusterId

The cluster's identifier (ID).

Type: String

Pattern: cluster-[2-7a-zA-Z]{11,16}

Required: No

CreateTimestamp

The date and time when the cluster was created.

Type: Timestamp

Required: No

Hsms

Contains information about the HSMs in the cluster.

Type: Array of Hsm objects

Required: No

HsmType

The type of HSM that the cluster contains.

Type: String

Length Constraints: Maximum length of 32.

Pattern: ((p|)hsm[0-9][a-z.]*\.[a-zA-Z]+)

Required: No

Mode

The mode of the cluster.

Type: String

Valid Values: FIPS | NON_FIPS

Required: No

NetworkType

The cluster's NetworkType can be IPv4 (the default) or DUALSTACK. The IPv4 NetworkType restricts communication between your application and the hardware security modules (HSMs) to the IPv4 protocol only. The DUALSTACK NetworkType enables communication over both IPv4 and IPv6 protocols. To use DUALSTACK, configure your virtual private cloud (VPC) and subnets to support both IPv4 and IPv6. This configuration involves adding IPv6 Classless Inter-Domain Routing (CIDR) blocks to the existing IPv4 CIDR blocks in your subnets. The NetworkType you choose affects the network addressing options for your cluster. DUALSTACK provides more flexibility by supporting both IPv4 and IPv6 communication.

Type: String

Valid Values: IPV4 | DUALSTACK

Required: No

PreCoPassword

The default password for the cluster's Pre-Crypto Officer (PRECO) user.

Type: String

Length Constraints: Minimum length of 7. Maximum length of 32.

Required: No

SecurityGroup

The identifier (ID) of the cluster's security group.

Type: String

Pattern: sg-[0-9a-fA-F]{8,17}

Required: No

SourceBackupId

The identifier (ID) of the backup used to create the cluster. This value exists only when the cluster was created from a backup.

Type: String

Pattern: backup-[2-7a-zA-Z]{11,16}

Required: No

State

The cluster's state.

Type: String

Valid Values: CREATE_IN_PROGRESS | UNINITIALIZED | INITIALIZE_IN_PROGRESS | INITIALIZED | ACTIVE | UPDATE_IN_PROGRESS | MODIFY_IN_PROGRESS | ROLLBACK_IN_PROGRESS | DELETE_IN_PROGRESS | DELETED | DEGRADED

Required: No

StateMessage

A description of the cluster's state.

Type: String

Length Constraints: Maximum length of 300.

Pattern: .*

Required: No

SubnetMapping

A map from availability zone to the cluster’s subnet in that availability zone.

Type: String to string map

Key Pattern: [a-z]{2}(-(gov))?-(east|west|north|south|central){1,2}-\d[a-z]

Value Pattern: subnet-[0-9a-fA-F]{8,17}

Required: No

TagList

The list of tags for the cluster.

Type: Array of Tag objects

Array Members: Minimum number of 1 item. Maximum number of 50 items.

Required: No

VpcId

The identifier (ID) of the virtual private cloud (VPC) that contains the cluster.

Type: String

Pattern: vpc-[0-9a-fA-F]

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: