amazonka-certificatemanager-pca-1.6.0: Amazon Certificate Manager Private Certificate Authority SDK.

Copyright(c) 2013-2018 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay <brendan.g.hay+amazonka@gmail.com>
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellNone
LanguageHaskell2010

Network.AWS.CertificateManagerPCA

Contents

Description

You can use the ACM PCA API to create a private certificate authority (CA). You must first call the CreateCertificateAuthority function. If successful, the function returns an Amazon Resource Name (ARN) for your private CA. Use this ARN as input to the GetCertificateAuthorityCsr function to retrieve the certificate signing request (CSR) for your private CA certificate. Sign the CSR using the root or an intermediate CA in your on-premises PKI hierarchy, and call the ImportCertificateAuthorityCertificate to import your signed private CA certificate into ACM PCA.

Use your private CA to issue and revoke certificates. These are private certificates that identify and secure client computers, servers, applications, services, devices, and users over SSLS/TLS connections within your organization. Call the IssueCertificate function to issue a certificate. Call the RevokeCertificate function to revoke a certificate.

Your private CA can optionally create a certificate revocation list (CRL) to track the certificates you revoke. To create a CRL, you must specify a RevocationConfiguration object when you call the CreateCertificateAuthority function. ACM PCA writes the CRL to an S3 bucket that you specify. You must specify a bucket policy that grants ACM PCA write permission.

You can also call the CreateCertificateAuthorityAuditReport to create an optional audit report that lists every time the CA private key is used. The private key is used for signing when the IssueCertificate or RevokeCertificate function is called.

Synopsis

Service Configuration

certificateManagerPCA :: Service Source #

API version 2017-08-22 of the Amazon Certificate Manager Private Certificate Authority SDK configuration.

Errors

Error matchers are designed for use with the functions provided by Control.Exception.Lens. This allows catching (and rethrowing) service specific errors returned by CertificateManagerPCA.

InvalidTagException

_InvalidTagException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The tag associated with the CA is not valid. The invalid argument is contained in the message field.

MalformedCSRException

_MalformedCSRException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The certificate signing request is invalid.

RequestAlreadyProcessedException

_RequestAlreadyProcessedException :: AsError a => Getting (First ServiceError) a ServiceError Source #

Your request has already been completed.

MalformedCertificateException

_MalformedCertificateException :: AsError a => Getting (First ServiceError) a ServiceError Source #

One or more fields in the certificate are invalid.

RequestFailedException

_RequestFailedException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The request has failed for an unspecified reason.

CertificateMismatchException

_CertificateMismatchException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The certificate authority certificate you are importing does not comply with conditions specified in the certificate that signed it.

TooManyTagsException

_TooManyTagsException :: AsError a => Getting (First ServiceError) a ServiceError Source #

You can associate up to 50 tags with a private CA. Exception information is contained in the exception message field.

InvalidArgsException

_InvalidArgsException :: AsError a => Getting (First ServiceError) a ServiceError Source #

One or more of the specified arguments was not valid.

RequestInProgressException

_RequestInProgressException :: AsError a => Getting (First ServiceError) a ServiceError Source #

Your request is already in progress.

ConcurrentModificationException

_ConcurrentModificationException :: AsError a => Getting (First ServiceError) a ServiceError Source #

A previous update to your private CA is still ongoing.

InvalidNextTokenException

_InvalidNextTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The token specified in the NextToken argument is not valid. Use the token returned from your previous call to ListCertificateAuthorities .

InvalidARNException

_InvalidARNException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The requested Amazon Resource Name (ARN) does not refer to an existing resource.

InvalidPolicyException

_InvalidPolicyException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The S3 bucket policy is not valid. The policy must give ACM PCA rights to read from and write to the bucket and find the bucket location.

ResourceNotFoundException

_ResourceNotFoundException :: AsError a => Getting (First ServiceError) a ServiceError Source #

A resource such as a private CA, S3 bucket, certificate, or audit report cannot be found.

InvalidStateException

_InvalidStateException :: AsError a => Getting (First ServiceError) a ServiceError Source #

The private CA is in a state during which a report cannot be generated.

LimitExceededException

_LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #

An ACM PCA limit has been exceeded. See the exception message returned to determine the limit that was exceeded.

Waiters

Waiters poll by repeatedly sending a request until some remote success condition configured by the Wait specification is fulfilled. The Wait specification determines how many attempts should be made, in addition to delay and retry strategies.

Operations

Some AWS operations return results that are incomplete and require subsequent requests in order to obtain the entire result set. The process of sending subsequent requests to continue where a previous request left off is called pagination. For example, the ListObjects operation of Amazon S3 returns up to 1000 objects at a time, and you must send subsequent requests with the appropriate Marker in order to retrieve the next page of results.

Operations that have an AWSPager instance can transparently perform subsequent requests, correctly setting Markers and other request facets to iterate through the entire result set of a truncated API operation. Operations which support this have an additional note in the documentation.

Many operations have the ability to filter results on the server side. See the individual operation parameters for details.

ImportCertificateAuthorityCertificate

DescribeCertificateAuthorityAuditReport

RevokeCertificate

UpdateCertificateAuthority

DeleteCertificateAuthority

GetCertificateAuthorityCSR

CreateCertificateAuthority

ListCertificateAuthorities

GetCertificate

TagCertificateAuthority

DescribeCertificateAuthority

IssueCertificate

GetCertificateAuthorityCertificate

UntagCertificateAuthority

CreateCertificateAuthorityAuditReport

ListTags

Types

AuditReportResponseFormat

data AuditReportResponseFormat Source #

Constructors

CSV 
JSON 

Instances

Bounded AuditReportResponseFormat Source # 
Enum AuditReportResponseFormat Source # 
Eq AuditReportResponseFormat Source # 
Data AuditReportResponseFormat Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> AuditReportResponseFormat -> c AuditReportResponseFormat #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c AuditReportResponseFormat #

toConstr :: AuditReportResponseFormat -> Constr #

dataTypeOf :: AuditReportResponseFormat -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c AuditReportResponseFormat) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c AuditReportResponseFormat) #

gmapT :: (forall b. Data b => b -> b) -> AuditReportResponseFormat -> AuditReportResponseFormat #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> AuditReportResponseFormat -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> AuditReportResponseFormat -> r #

gmapQ :: (forall d. Data d => d -> u) -> AuditReportResponseFormat -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> AuditReportResponseFormat -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> AuditReportResponseFormat -> m AuditReportResponseFormat #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> AuditReportResponseFormat -> m AuditReportResponseFormat #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> AuditReportResponseFormat -> m AuditReportResponseFormat #

Ord AuditReportResponseFormat Source # 
Read AuditReportResponseFormat Source # 
Show AuditReportResponseFormat Source # 
Generic AuditReportResponseFormat Source # 
Hashable AuditReportResponseFormat Source # 
ToJSON AuditReportResponseFormat Source # 
NFData AuditReportResponseFormat Source # 
ToHeader AuditReportResponseFormat Source # 
ToQuery AuditReportResponseFormat Source # 
ToByteString AuditReportResponseFormat Source # 
FromText AuditReportResponseFormat Source # 
ToText AuditReportResponseFormat Source # 
type Rep AuditReportResponseFormat Source # 
type Rep AuditReportResponseFormat = D1 * (MetaData "AuditReportResponseFormat" "Network.AWS.CertificateManagerPCA.Types.Sum" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) ((:+:) * (C1 * (MetaCons "CSV" PrefixI False) (U1 *)) (C1 * (MetaCons "JSON" PrefixI False) (U1 *)))

AuditReportStatus

data AuditReportStatus Source #

Instances

Bounded AuditReportStatus Source # 
Enum AuditReportStatus Source # 
Eq AuditReportStatus Source # 
Data AuditReportStatus Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> AuditReportStatus -> c AuditReportStatus #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c AuditReportStatus #

toConstr :: AuditReportStatus -> Constr #

dataTypeOf :: AuditReportStatus -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c AuditReportStatus) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c AuditReportStatus) #

gmapT :: (forall b. Data b => b -> b) -> AuditReportStatus -> AuditReportStatus #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> AuditReportStatus -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> AuditReportStatus -> r #

gmapQ :: (forall d. Data d => d -> u) -> AuditReportStatus -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> AuditReportStatus -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> AuditReportStatus -> m AuditReportStatus #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> AuditReportStatus -> m AuditReportStatus #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> AuditReportStatus -> m AuditReportStatus #

Ord AuditReportStatus Source # 
Read AuditReportStatus Source # 
Show AuditReportStatus Source # 
Generic AuditReportStatus Source # 
Hashable AuditReportStatus Source # 
FromJSON AuditReportStatus Source # 
NFData AuditReportStatus Source # 

Methods

rnf :: AuditReportStatus -> () #

ToHeader AuditReportStatus Source # 
ToQuery AuditReportStatus Source # 
ToByteString AuditReportStatus Source # 
FromText AuditReportStatus Source # 
ToText AuditReportStatus Source # 
type Rep AuditReportStatus Source # 
type Rep AuditReportStatus = D1 * (MetaData "AuditReportStatus" "Network.AWS.CertificateManagerPCA.Types.Sum" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) ((:+:) * (C1 * (MetaCons "ARSCreating" PrefixI False) (U1 *)) ((:+:) * (C1 * (MetaCons "ARSFailed" PrefixI False) (U1 *)) (C1 * (MetaCons "ARSSuccess" PrefixI False) (U1 *))))

CertificateAuthorityStatus

data CertificateAuthorityStatus Source #

Instances

Bounded CertificateAuthorityStatus Source # 
Enum CertificateAuthorityStatus Source # 
Eq CertificateAuthorityStatus Source # 
Data CertificateAuthorityStatus Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> CertificateAuthorityStatus -> c CertificateAuthorityStatus #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c CertificateAuthorityStatus #

toConstr :: CertificateAuthorityStatus -> Constr #

dataTypeOf :: CertificateAuthorityStatus -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c CertificateAuthorityStatus) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c CertificateAuthorityStatus) #

gmapT :: (forall b. Data b => b -> b) -> CertificateAuthorityStatus -> CertificateAuthorityStatus #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> CertificateAuthorityStatus -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> CertificateAuthorityStatus -> r #

gmapQ :: (forall d. Data d => d -> u) -> CertificateAuthorityStatus -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> CertificateAuthorityStatus -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> CertificateAuthorityStatus -> m CertificateAuthorityStatus #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> CertificateAuthorityStatus -> m CertificateAuthorityStatus #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> CertificateAuthorityStatus -> m CertificateAuthorityStatus #

Ord CertificateAuthorityStatus Source # 
Read CertificateAuthorityStatus Source # 
Show CertificateAuthorityStatus Source # 
Generic CertificateAuthorityStatus Source # 
Hashable CertificateAuthorityStatus Source # 
ToJSON CertificateAuthorityStatus Source # 
FromJSON CertificateAuthorityStatus Source # 
NFData CertificateAuthorityStatus Source # 
ToHeader CertificateAuthorityStatus Source # 
ToQuery CertificateAuthorityStatus Source # 
ToByteString CertificateAuthorityStatus Source # 
FromText CertificateAuthorityStatus Source # 
ToText CertificateAuthorityStatus Source # 
type Rep CertificateAuthorityStatus Source # 
type Rep CertificateAuthorityStatus = D1 * (MetaData "CertificateAuthorityStatus" "Network.AWS.CertificateManagerPCA.Types.Sum" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) ((:+:) * ((:+:) * (C1 * (MetaCons "Active" PrefixI False) (U1 *)) ((:+:) * (C1 * (MetaCons "Creating" PrefixI False) (U1 *)) (C1 * (MetaCons "Disabled" PrefixI False) (U1 *)))) ((:+:) * (C1 * (MetaCons "Expired" PrefixI False) (U1 *)) ((:+:) * (C1 * (MetaCons "Failed" PrefixI False) (U1 *)) (C1 * (MetaCons "PendingCertificate" PrefixI False) (U1 *)))))

CertificateAuthorityType

data CertificateAuthorityType Source #

Constructors

Subordinate 

Instances

Bounded CertificateAuthorityType Source # 
Enum CertificateAuthorityType Source # 
Eq CertificateAuthorityType Source # 
Data CertificateAuthorityType Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> CertificateAuthorityType -> c CertificateAuthorityType #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c CertificateAuthorityType #

toConstr :: CertificateAuthorityType -> Constr #

dataTypeOf :: CertificateAuthorityType -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c CertificateAuthorityType) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c CertificateAuthorityType) #

gmapT :: (forall b. Data b => b -> b) -> CertificateAuthorityType -> CertificateAuthorityType #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> CertificateAuthorityType -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> CertificateAuthorityType -> r #

gmapQ :: (forall d. Data d => d -> u) -> CertificateAuthorityType -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> CertificateAuthorityType -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> CertificateAuthorityType -> m CertificateAuthorityType #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> CertificateAuthorityType -> m CertificateAuthorityType #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> CertificateAuthorityType -> m CertificateAuthorityType #

Ord CertificateAuthorityType Source # 
Read CertificateAuthorityType Source # 
Show CertificateAuthorityType Source # 
Generic CertificateAuthorityType Source # 
Hashable CertificateAuthorityType Source # 
ToJSON CertificateAuthorityType Source # 
FromJSON CertificateAuthorityType Source # 
NFData CertificateAuthorityType Source # 
ToHeader CertificateAuthorityType Source # 
ToQuery CertificateAuthorityType Source # 
ToByteString CertificateAuthorityType Source # 
FromText CertificateAuthorityType Source # 
ToText CertificateAuthorityType Source # 
type Rep CertificateAuthorityType Source # 
type Rep CertificateAuthorityType = D1 * (MetaData "CertificateAuthorityType" "Network.AWS.CertificateManagerPCA.Types.Sum" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) (C1 * (MetaCons "Subordinate" PrefixI False) (U1 *))

FailureReason

data FailureReason Source #

Instances

Bounded FailureReason Source # 
Enum FailureReason Source # 
Eq FailureReason Source # 
Data FailureReason Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> FailureReason -> c FailureReason #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c FailureReason #

toConstr :: FailureReason -> Constr #

dataTypeOf :: FailureReason -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c FailureReason) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c FailureReason) #

gmapT :: (forall b. Data b => b -> b) -> FailureReason -> FailureReason #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> FailureReason -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> FailureReason -> r #

gmapQ :: (forall d. Data d => d -> u) -> FailureReason -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> FailureReason -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> FailureReason -> m FailureReason #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> FailureReason -> m FailureReason #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> FailureReason -> m FailureReason #

Ord FailureReason Source # 
Read FailureReason Source # 
Show FailureReason Source # 
Generic FailureReason Source # 

Associated Types

type Rep FailureReason :: * -> * #

Hashable FailureReason Source # 
FromJSON FailureReason Source # 
NFData FailureReason Source # 

Methods

rnf :: FailureReason -> () #

ToHeader FailureReason Source # 
ToQuery FailureReason Source # 
ToByteString FailureReason Source # 
FromText FailureReason Source # 
ToText FailureReason Source # 

Methods

toText :: FailureReason -> Text #

type Rep FailureReason Source # 
type Rep FailureReason = D1 * (MetaData "FailureReason" "Network.AWS.CertificateManagerPCA.Types.Sum" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) ((:+:) * (C1 * (MetaCons "Other" PrefixI False) (U1 *)) ((:+:) * (C1 * (MetaCons "RequestTimedOut" PrefixI False) (U1 *)) (C1 * (MetaCons "UnsupportedAlgorithm" PrefixI False) (U1 *))))

KeyAlgorithm

data KeyAlgorithm Source #

Instances

Bounded KeyAlgorithm Source # 
Enum KeyAlgorithm Source # 
Eq KeyAlgorithm Source # 
Data KeyAlgorithm Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> KeyAlgorithm -> c KeyAlgorithm #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c KeyAlgorithm #

toConstr :: KeyAlgorithm -> Constr #

dataTypeOf :: KeyAlgorithm -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c KeyAlgorithm) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c KeyAlgorithm) #

gmapT :: (forall b. Data b => b -> b) -> KeyAlgorithm -> KeyAlgorithm #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> KeyAlgorithm -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> KeyAlgorithm -> r #

gmapQ :: (forall d. Data d => d -> u) -> KeyAlgorithm -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> KeyAlgorithm -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> KeyAlgorithm -> m KeyAlgorithm #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyAlgorithm -> m KeyAlgorithm #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> KeyAlgorithm -> m KeyAlgorithm #

Ord KeyAlgorithm Source # 
Read KeyAlgorithm Source # 
Show KeyAlgorithm Source # 
Generic KeyAlgorithm Source # 

Associated Types

type Rep KeyAlgorithm :: * -> * #

Hashable KeyAlgorithm Source # 
ToJSON KeyAlgorithm Source # 
FromJSON KeyAlgorithm Source # 
NFData KeyAlgorithm Source # 

Methods

rnf :: KeyAlgorithm -> () #

ToHeader KeyAlgorithm Source # 
ToQuery KeyAlgorithm Source # 
ToByteString KeyAlgorithm Source # 
FromText KeyAlgorithm Source # 
ToText KeyAlgorithm Source # 

Methods

toText :: KeyAlgorithm -> Text #

type Rep KeyAlgorithm Source # 
type Rep KeyAlgorithm = D1 * (MetaData "KeyAlgorithm" "Network.AWS.CertificateManagerPCA.Types.Sum" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) ((:+:) * ((:+:) * (C1 * (MetaCons "EcPRIME256V1" PrefixI False) (U1 *)) (C1 * (MetaCons "EcSECP384R1" PrefixI False) (U1 *))) ((:+:) * (C1 * (MetaCons "Rsa2048" PrefixI False) (U1 *)) (C1 * (MetaCons "Rsa4096" PrefixI False) (U1 *))))

RevocationReason

data RevocationReason Source #

Instances

Bounded RevocationReason Source # 
Enum RevocationReason Source # 
Eq RevocationReason Source # 
Data RevocationReason Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> RevocationReason -> c RevocationReason #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c RevocationReason #

toConstr :: RevocationReason -> Constr #

dataTypeOf :: RevocationReason -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c RevocationReason) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c RevocationReason) #

gmapT :: (forall b. Data b => b -> b) -> RevocationReason -> RevocationReason #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> RevocationReason -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> RevocationReason -> r #

gmapQ :: (forall d. Data d => d -> u) -> RevocationReason -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> RevocationReason -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> RevocationReason -> m RevocationReason #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> RevocationReason -> m RevocationReason #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> RevocationReason -> m RevocationReason #

Ord RevocationReason Source # 
Read RevocationReason Source # 
Show RevocationReason Source # 
Generic RevocationReason Source # 
Hashable RevocationReason Source # 
ToJSON RevocationReason Source # 
NFData RevocationReason Source # 

Methods

rnf :: RevocationReason -> () #

ToHeader RevocationReason Source # 
ToQuery RevocationReason Source # 
ToByteString RevocationReason Source # 
FromText RevocationReason Source # 
ToText RevocationReason Source # 
type Rep RevocationReason Source # 
type Rep RevocationReason = D1 * (MetaData "RevocationReason" "Network.AWS.CertificateManagerPCA.Types.Sum" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) ((:+:) * ((:+:) * ((:+:) * (C1 * (MetaCons "AACompromise" PrefixI False) (U1 *)) (C1 * (MetaCons "AffiliationChanged" PrefixI False) (U1 *))) ((:+:) * (C1 * (MetaCons "CertificateAuthorityCompromise" PrefixI False) (U1 *)) (C1 * (MetaCons "CessationOfOperation" PrefixI False) (U1 *)))) ((:+:) * ((:+:) * (C1 * (MetaCons "KeyCompromise" PrefixI False) (U1 *)) (C1 * (MetaCons "PrivilegeWithdrawn" PrefixI False) (U1 *))) ((:+:) * (C1 * (MetaCons "Superseded" PrefixI False) (U1 *)) (C1 * (MetaCons "Unspecified" PrefixI False) (U1 *)))))

SigningAlgorithm

data SigningAlgorithm Source #

Instances

Bounded SigningAlgorithm Source # 
Enum SigningAlgorithm Source # 
Eq SigningAlgorithm Source # 
Data SigningAlgorithm Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> SigningAlgorithm -> c SigningAlgorithm #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c SigningAlgorithm #

toConstr :: SigningAlgorithm -> Constr #

dataTypeOf :: SigningAlgorithm -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c SigningAlgorithm) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c SigningAlgorithm) #

gmapT :: (forall b. Data b => b -> b) -> SigningAlgorithm -> SigningAlgorithm #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> SigningAlgorithm -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> SigningAlgorithm -> r #

gmapQ :: (forall d. Data d => d -> u) -> SigningAlgorithm -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> SigningAlgorithm -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> SigningAlgorithm -> m SigningAlgorithm #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> SigningAlgorithm -> m SigningAlgorithm #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> SigningAlgorithm -> m SigningAlgorithm #

Ord SigningAlgorithm Source # 
Read SigningAlgorithm Source # 
Show SigningAlgorithm Source # 
Generic SigningAlgorithm Source # 
Hashable SigningAlgorithm Source # 
ToJSON SigningAlgorithm Source # 
FromJSON SigningAlgorithm Source # 
NFData SigningAlgorithm Source # 

Methods

rnf :: SigningAlgorithm -> () #

ToHeader SigningAlgorithm Source # 
ToQuery SigningAlgorithm Source # 
ToByteString SigningAlgorithm Source # 
FromText SigningAlgorithm Source # 
ToText SigningAlgorithm Source # 
type Rep SigningAlgorithm Source # 
type Rep SigningAlgorithm = D1 * (MetaData "SigningAlgorithm" "Network.AWS.CertificateManagerPCA.Types.Sum" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) ((:+:) * ((:+:) * (C1 * (MetaCons "SHA256WITHECDSA" PrefixI False) (U1 *)) ((:+:) * (C1 * (MetaCons "SHA256WITHRSA" PrefixI False) (U1 *)) (C1 * (MetaCons "SHA384WITHECDSA" PrefixI False) (U1 *)))) ((:+:) * (C1 * (MetaCons "SHA384WITHRSA" PrefixI False) (U1 *)) ((:+:) * (C1 * (MetaCons "SHA512WITHECDSA" PrefixI False) (U1 *)) (C1 * (MetaCons "SHA512WITHRSA" PrefixI False) (U1 *)))))

ValidityPeriodType

data ValidityPeriodType Source #

Constructors

Absolute 
Days 
EndDate 
Months 
Years 

Instances

Bounded ValidityPeriodType Source # 
Enum ValidityPeriodType Source # 
Eq ValidityPeriodType Source # 
Data ValidityPeriodType Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> ValidityPeriodType -> c ValidityPeriodType #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c ValidityPeriodType #

toConstr :: ValidityPeriodType -> Constr #

dataTypeOf :: ValidityPeriodType -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c ValidityPeriodType) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c ValidityPeriodType) #

gmapT :: (forall b. Data b => b -> b) -> ValidityPeriodType -> ValidityPeriodType #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> ValidityPeriodType -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> ValidityPeriodType -> r #

gmapQ :: (forall d. Data d => d -> u) -> ValidityPeriodType -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> ValidityPeriodType -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> ValidityPeriodType -> m ValidityPeriodType #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> ValidityPeriodType -> m ValidityPeriodType #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> ValidityPeriodType -> m ValidityPeriodType #

Ord ValidityPeriodType Source # 
Read ValidityPeriodType Source # 
Show ValidityPeriodType Source # 
Generic ValidityPeriodType Source # 
Hashable ValidityPeriodType Source # 
ToJSON ValidityPeriodType Source # 
NFData ValidityPeriodType Source # 

Methods

rnf :: ValidityPeriodType -> () #

ToHeader ValidityPeriodType Source # 
ToQuery ValidityPeriodType Source # 
ToByteString ValidityPeriodType Source # 
FromText ValidityPeriodType Source # 
ToText ValidityPeriodType Source # 
type Rep ValidityPeriodType Source # 
type Rep ValidityPeriodType = D1 * (MetaData "ValidityPeriodType" "Network.AWS.CertificateManagerPCA.Types.Sum" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) ((:+:) * ((:+:) * (C1 * (MetaCons "Absolute" PrefixI False) (U1 *)) (C1 * (MetaCons "Days" PrefixI False) (U1 *))) ((:+:) * (C1 * (MetaCons "EndDate" PrefixI False) (U1 *)) ((:+:) * (C1 * (MetaCons "Months" PrefixI False) (U1 *)) (C1 * (MetaCons "Years" PrefixI False) (U1 *)))))

ASN1Subject

data ASN1Subject Source #

Contains information about the certificate subject. The certificate can be one issued by your private certificate authority (CA) or it can be your private CA certificate. The Subject field in the certificate identifies the entity that owns or controls the public key in the certificate. The entity can be a user, computer, device, or service. The Subject must contain an X.500 distinguished name (DN). A DN is a sequence of relative distinguished names (RDNs). The RDNs are separated by commas in the certificate. The DN must be unique for each for each entity, but your private CA can issue more than one certificate with the same DN to the same entity.

See: asn1Subject smart constructor.

Instances

Eq ASN1Subject Source # 
Data ASN1Subject Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> ASN1Subject -> c ASN1Subject #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c ASN1Subject #

toConstr :: ASN1Subject -> Constr #

dataTypeOf :: ASN1Subject -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c ASN1Subject) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c ASN1Subject) #

gmapT :: (forall b. Data b => b -> b) -> ASN1Subject -> ASN1Subject #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> ASN1Subject -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> ASN1Subject -> r #

gmapQ :: (forall d. Data d => d -> u) -> ASN1Subject -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> ASN1Subject -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> ASN1Subject -> m ASN1Subject #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> ASN1Subject -> m ASN1Subject #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> ASN1Subject -> m ASN1Subject #

Read ASN1Subject Source # 
Show ASN1Subject Source # 
Generic ASN1Subject Source # 

Associated Types

type Rep ASN1Subject :: * -> * #

Hashable ASN1Subject Source # 
ToJSON ASN1Subject Source # 
FromJSON ASN1Subject Source # 
NFData ASN1Subject Source # 

Methods

rnf :: ASN1Subject -> () #

type Rep ASN1Subject Source # 
type Rep ASN1Subject = D1 * (MetaData "ASN1Subject" "Network.AWS.CertificateManagerPCA.Types.Product" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) (C1 * (MetaCons "ASN1Subject'" PrefixI True) ((:*:) * ((:*:) * ((:*:) * (S1 * (MetaSel (Just Symbol "_asGivenName") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) ((:*:) * (S1 * (MetaSel (Just Symbol "_asState") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_asCommonName") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))))) ((:*:) * ((:*:) * (S1 * (MetaSel (Just Symbol "_asOrganizationalUnit") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_asCountry") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text)))) ((:*:) * (S1 * (MetaSel (Just Symbol "_asGenerationQualifier") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_asLocality") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text)))))) ((:*:) * ((:*:) * (S1 * (MetaSel (Just Symbol "_asPseudonym") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) ((:*:) * (S1 * (MetaSel (Just Symbol "_asInitials") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_asTitle") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))))) ((:*:) * ((:*:) * (S1 * (MetaSel (Just Symbol "_asOrganization") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_asSerialNumber") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text)))) ((:*:) * (S1 * (MetaSel (Just Symbol "_asSurname") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_asDistinguishedNameQualifier") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))))))))

asn1Subject :: ASN1Subject Source #

Creates a value of ASN1Subject with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

  • asGivenName - First name.
  • asState - State in which the subject of the certificate is located.
  • asCommonName - Fully qualified domain name (FQDN) associated with the certificate subject.
  • asOrganizationalUnit - A subdivision or unit of the organization (such as sales or finance) with which the certificate subject is affiliated.
  • asCountry - Two digit code that specifies the country in which the certificate subject located.
  • asGenerationQualifier - Typically a qualifier appended to the name of an individual. Examples include Jr. for junior, Sr. for senior, and III for third.
  • asLocality - The locality (such as a city or town) in which the certificate subject is located.
  • asPseudonym - Typically a shortened version of a longer GivenName . For example, Jonathan is often shortened to John. Elizabeth is often shortened to Beth, Liz, or Eliza.
  • asInitials - Concatenation that typically contains the first letter of the GivenName , the first letter of the middle name if one exists, and the first letter of the SurName .
  • asTitle - A title such as Mr. or Ms. which is pre-pended to the name to refer formally to the certificate subject.
  • asOrganization - Legal name of the organization with which the certificate subject is affiliated.
  • asSerialNumber - The certificate serial number.
  • asSurname - Family name. In the US and the UK for example, the surname of an individual is ordered last. In Asian cultures the surname is typically ordered first.
  • asDistinguishedNameQualifier - Disambiguating information for the certificate subject.

asState :: Lens' ASN1Subject (Maybe Text) Source #

State in which the subject of the certificate is located.

asCommonName :: Lens' ASN1Subject (Maybe Text) Source #

Fully qualified domain name (FQDN) associated with the certificate subject.

asOrganizationalUnit :: Lens' ASN1Subject (Maybe Text) Source #

A subdivision or unit of the organization (such as sales or finance) with which the certificate subject is affiliated.

asCountry :: Lens' ASN1Subject (Maybe Text) Source #

Two digit code that specifies the country in which the certificate subject located.

asGenerationQualifier :: Lens' ASN1Subject (Maybe Text) Source #

Typically a qualifier appended to the name of an individual. Examples include Jr. for junior, Sr. for senior, and III for third.

asLocality :: Lens' ASN1Subject (Maybe Text) Source #

The locality (such as a city or town) in which the certificate subject is located.

asPseudonym :: Lens' ASN1Subject (Maybe Text) Source #

Typically a shortened version of a longer GivenName . For example, Jonathan is often shortened to John. Elizabeth is often shortened to Beth, Liz, or Eliza.

asInitials :: Lens' ASN1Subject (Maybe Text) Source #

Concatenation that typically contains the first letter of the GivenName , the first letter of the middle name if one exists, and the first letter of the SurName .

asTitle :: Lens' ASN1Subject (Maybe Text) Source #

A title such as Mr. or Ms. which is pre-pended to the name to refer formally to the certificate subject.

asOrganization :: Lens' ASN1Subject (Maybe Text) Source #

Legal name of the organization with which the certificate subject is affiliated.

asSerialNumber :: Lens' ASN1Subject (Maybe Text) Source #

The certificate serial number.

asSurname :: Lens' ASN1Subject (Maybe Text) Source #

Family name. In the US and the UK for example, the surname of an individual is ordered last. In Asian cultures the surname is typically ordered first.

asDistinguishedNameQualifier :: Lens' ASN1Subject (Maybe Text) Source #

Disambiguating information for the certificate subject.

CertificateAuthority

data CertificateAuthority Source #

Contains information about your private certificate authority (CA). Your private CA can issue and revoke X.509 digital certificates. Digital certificates verify that the entity named in the certificate Subject field owns or controls the public key contained in the Subject Public Key Info field. Call the CreateCertificateAuthority function to create your private CA. You must then call the GetCertificateAuthorityCertificate function to retrieve a private CA certificate signing request (CSR). Take the CSR to your on-premises CA and sign it with the root CA certificate or a subordinate certificate. Call the ImportCertificateAuthorityCertificate function to import the signed certificate into AWS Certificate Manager (ACM).

See: certificateAuthority smart constructor.

Instances

Eq CertificateAuthority Source # 
Data CertificateAuthority Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> CertificateAuthority -> c CertificateAuthority #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c CertificateAuthority #

toConstr :: CertificateAuthority -> Constr #

dataTypeOf :: CertificateAuthority -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c CertificateAuthority) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c CertificateAuthority) #

gmapT :: (forall b. Data b => b -> b) -> CertificateAuthority -> CertificateAuthority #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> CertificateAuthority -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> CertificateAuthority -> r #

gmapQ :: (forall d. Data d => d -> u) -> CertificateAuthority -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> CertificateAuthority -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> CertificateAuthority -> m CertificateAuthority #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> CertificateAuthority -> m CertificateAuthority #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> CertificateAuthority -> m CertificateAuthority #

Read CertificateAuthority Source # 
Show CertificateAuthority Source # 
Generic CertificateAuthority Source # 
Hashable CertificateAuthority Source # 
FromJSON CertificateAuthority Source # 
NFData CertificateAuthority Source # 

Methods

rnf :: CertificateAuthority -> () #

type Rep CertificateAuthority Source # 
type Rep CertificateAuthority = D1 * (MetaData "CertificateAuthority" "Network.AWS.CertificateManagerPCA.Types.Product" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) (C1 * (MetaCons "CertificateAuthority'" PrefixI True) ((:*:) * ((:*:) * ((:*:) * (S1 * (MetaSel (Just Symbol "_caStatus") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe CertificateAuthorityStatus))) (S1 * (MetaSel (Just Symbol "_caFailureReason") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe FailureReason)))) ((:*:) * (S1 * (MetaSel (Just Symbol "_caCertificateAuthorityConfiguration") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe CertificateAuthorityConfiguration))) ((:*:) * (S1 * (MetaSel (Just Symbol "_caARN") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_caCreatedAt") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe POSIX)))))) ((:*:) * ((:*:) * (S1 * (MetaSel (Just Symbol "_caSerial") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) ((:*:) * (S1 * (MetaSel (Just Symbol "_caNotBefore") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe POSIX))) (S1 * (MetaSel (Just Symbol "_caType") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe CertificateAuthorityType))))) ((:*:) * (S1 * (MetaSel (Just Symbol "_caRevocationConfiguration") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe RevocationConfiguration))) ((:*:) * (S1 * (MetaSel (Just Symbol "_caLastStateChangeAt") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe POSIX))) (S1 * (MetaSel (Just Symbol "_caNotAfter") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe POSIX))))))))

certificateAuthority :: CertificateAuthority Source #

Creates a value of CertificateAuthority with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

  • caStatus - Status of your private CA.
  • caFailureReason - Reason the request to create your private CA failed.
  • caCertificateAuthorityConfiguration - Your private CA configuration.
  • caARN - Amazon Resource Name (ARN) for your private certificate authority (CA). The format is 12345678-1234-1234-1234-123456789012 .
  • caCreatedAt - Date and time at which your private CA was created.
  • caSerial - Serial number of your private CA.
  • caNotBefore - Date and time before which your private CA certificate is not valid.
  • caType - Type of your private CA.
  • caRevocationConfiguration - Information about the certificate revocation list (CRL) created and maintained by your private CA.
  • caLastStateChangeAt - Date and time at which your private CA was last updated.
  • caNotAfter - Date and time after which your private CA certificate is not valid.

caFailureReason :: Lens' CertificateAuthority (Maybe FailureReason) Source #

Reason the request to create your private CA failed.

caARN :: Lens' CertificateAuthority (Maybe Text) Source #

Amazon Resource Name (ARN) for your private certificate authority (CA). The format is 12345678-1234-1234-1234-123456789012 .

caCreatedAt :: Lens' CertificateAuthority (Maybe UTCTime) Source #

Date and time at which your private CA was created.

caSerial :: Lens' CertificateAuthority (Maybe Text) Source #

Serial number of your private CA.

caNotBefore :: Lens' CertificateAuthority (Maybe UTCTime) Source #

Date and time before which your private CA certificate is not valid.

caRevocationConfiguration :: Lens' CertificateAuthority (Maybe RevocationConfiguration) Source #

Information about the certificate revocation list (CRL) created and maintained by your private CA.

caLastStateChangeAt :: Lens' CertificateAuthority (Maybe UTCTime) Source #

Date and time at which your private CA was last updated.

caNotAfter :: Lens' CertificateAuthority (Maybe UTCTime) Source #

Date and time after which your private CA certificate is not valid.

CertificateAuthorityConfiguration

data CertificateAuthorityConfiguration Source #

Contains configuration information for your private certificate authority (CA). This includes information about the class of public key algorithm and the key pair that your private CA creates when it issues a certificate, the signature algorithm it uses used when issuing certificates, and its X.500 distinguished name. You must specify this information when you call the CreateCertificateAuthority function.

See: certificateAuthorityConfiguration smart constructor.

Instances

Eq CertificateAuthorityConfiguration Source # 
Data CertificateAuthorityConfiguration Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> CertificateAuthorityConfiguration -> c CertificateAuthorityConfiguration #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c CertificateAuthorityConfiguration #

toConstr :: CertificateAuthorityConfiguration -> Constr #

dataTypeOf :: CertificateAuthorityConfiguration -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c CertificateAuthorityConfiguration) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c CertificateAuthorityConfiguration) #

gmapT :: (forall b. Data b => b -> b) -> CertificateAuthorityConfiguration -> CertificateAuthorityConfiguration #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> CertificateAuthorityConfiguration -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> CertificateAuthorityConfiguration -> r #

gmapQ :: (forall d. Data d => d -> u) -> CertificateAuthorityConfiguration -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> CertificateAuthorityConfiguration -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> CertificateAuthorityConfiguration -> m CertificateAuthorityConfiguration #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> CertificateAuthorityConfiguration -> m CertificateAuthorityConfiguration #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> CertificateAuthorityConfiguration -> m CertificateAuthorityConfiguration #

Read CertificateAuthorityConfiguration Source # 
Show CertificateAuthorityConfiguration Source # 
Generic CertificateAuthorityConfiguration Source # 
Hashable CertificateAuthorityConfiguration Source # 
ToJSON CertificateAuthorityConfiguration Source # 
FromJSON CertificateAuthorityConfiguration Source # 
NFData CertificateAuthorityConfiguration Source # 
type Rep CertificateAuthorityConfiguration Source # 
type Rep CertificateAuthorityConfiguration = D1 * (MetaData "CertificateAuthorityConfiguration" "Network.AWS.CertificateManagerPCA.Types.Product" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) (C1 * (MetaCons "CertificateAuthorityConfiguration'" PrefixI True) ((:*:) * (S1 * (MetaSel (Just Symbol "_cacKeyAlgorithm") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * KeyAlgorithm)) ((:*:) * (S1 * (MetaSel (Just Symbol "_cacSigningAlgorithm") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * SigningAlgorithm)) (S1 * (MetaSel (Just Symbol "_cacSubject") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * ASN1Subject)))))

certificateAuthorityConfiguration Source #

Creates a value of CertificateAuthorityConfiguration with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

  • cacKeyAlgorithm - Type of the public key algorithm and size, in bits, of the key pair that your key pair creates when it issues a certificate.
  • cacSigningAlgorithm - Name of the algorithm your private CA uses to sign certificate requests.
  • cacSubject - Structure that contains X.500 distinguished name information for your private CA.

cacKeyAlgorithm :: Lens' CertificateAuthorityConfiguration KeyAlgorithm Source #

Type of the public key algorithm and size, in bits, of the key pair that your key pair creates when it issues a certificate.

cacSigningAlgorithm :: Lens' CertificateAuthorityConfiguration SigningAlgorithm Source #

Name of the algorithm your private CA uses to sign certificate requests.

cacSubject :: Lens' CertificateAuthorityConfiguration ASN1Subject Source #

Structure that contains X.500 distinguished name information for your private CA.

CrlConfiguration

data CrlConfiguration Source #

Contains configuration information for a certificate revocation list (CRL). Your private certificate authority (CA) creates base CRLs. Delta CRLs are not supported. You can enable CRLs for your new or an existing private CA by setting the Enabled parameter to true . Your private CA writes CRLs to an S3 bucket that you specify in the S3BucketName parameter. You can hide the name of your bucket by specifying a value for the CustomCname parameter. Your private CA copies the CNAME or the S3 bucket name to the CRL Distribution Points extension of each certificate it issues. Your S3 bucket policy must give write permission to ACM PCA.

Your private CA uses the value in the ExpirationInDays parameter to calculate the nextUpdate field in the CRL. The CRL is refreshed at 1/2 the age of next update or when a certificate is revoked. When a certificate is revoked, it is recorded in the next CRL that is generated and in the next audit report. Only time valid certificates are listed in the CRL. Expired certificates are not included.

CRLs contain the following fields:

  • Version : The current version number defined in RFC 5280 is V2. The integer value is 0x1.
  • Signature Algorithm : The name of the algorithm used to sign the CRL.
  • Issuer : The X.500 distinguished name of your private CA that issued the CRL.
  • Last Update : The issue date and time of this CRL.
  • Next Update : The day and time by which the next CRL will be issued.
  • Revoked Certificates : List of revoked certificates. Each list item contains the following information.
  • Serial Number : The serial number, in hexadecimal format, of the revoked certificate.
  • Revocation Date : Date and time the certificate was revoked.
  • CRL Entry Extensions : Optional extensions for the CRL entry.
  • X509v3 CRL Reason Code : Reason the certificate was revoked.
  • CRL Extensions : Optional extensions for the CRL.
  • X509v3 Authority Key Identifier : Identifies the public key associated with the private key used to sign the certificate.
  • X509v3 CRL Number: : Decimal sequence number for the CRL.
  • Signature Algorithm : Algorithm used by your private CA to sign the CRL.
  • Signature Value : Signature computed over the CRL.

Certificate revocation lists created by ACM PCA are DER-encoded. You can use the following OpenSSL command to list a CRL.

openssl crl -inform DER -text -in crl_path -noout

See: crlConfiguration smart constructor.

Instances

Eq CrlConfiguration Source # 
Data CrlConfiguration Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> CrlConfiguration -> c CrlConfiguration #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c CrlConfiguration #

toConstr :: CrlConfiguration -> Constr #

dataTypeOf :: CrlConfiguration -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c CrlConfiguration) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c CrlConfiguration) #

gmapT :: (forall b. Data b => b -> b) -> CrlConfiguration -> CrlConfiguration #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> CrlConfiguration -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> CrlConfiguration -> r #

gmapQ :: (forall d. Data d => d -> u) -> CrlConfiguration -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> CrlConfiguration -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> CrlConfiguration -> m CrlConfiguration #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> CrlConfiguration -> m CrlConfiguration #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> CrlConfiguration -> m CrlConfiguration #

Read CrlConfiguration Source # 
Show CrlConfiguration Source # 
Generic CrlConfiguration Source # 
Hashable CrlConfiguration Source # 
ToJSON CrlConfiguration Source # 
FromJSON CrlConfiguration Source # 
NFData CrlConfiguration Source # 

Methods

rnf :: CrlConfiguration -> () #

type Rep CrlConfiguration Source # 
type Rep CrlConfiguration = D1 * (MetaData "CrlConfiguration" "Network.AWS.CertificateManagerPCA.Types.Product" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) (C1 * (MetaCons "CrlConfiguration'" PrefixI True) ((:*:) * ((:*:) * (S1 * (MetaSel (Just Symbol "_ccCustomCname") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_ccExpirationInDays") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Nat)))) ((:*:) * (S1 * (MetaSel (Just Symbol "_ccS3BucketName") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_ccEnabled") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * Bool)))))

crlConfiguration Source #

Creates a value of CrlConfiguration with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

  • ccCustomCname - Name inserted into the certificate CRL Distribution Points extension that enables the use of an alias for the CRL distribution point. Use this value if you don't want the name of your S3 bucket to be public.
  • ccExpirationInDays - Number of days until a certificate expires.
  • ccS3BucketName - Name of the S3 bucket that contains the CRL. If you do not provide a value for the CustomCname argument, the name of your S3 bucket is placed into the CRL Distribution Points extension of the issued certificate. You can change the name of your bucket by calling the UpdateCertificateAuthority function. You must specify a bucket policy that allows ACM PCA to write the CRL to your bucket.
  • ccEnabled - Boolean value that specifies whether certificate revocation lists (CRLs) are enabled. You can use this value to enable certificate revocation for a new CA when you call the CreateCertificateAuthority function or for an existing CA when you call the UpdateCertificateAuthority function.

ccCustomCname :: Lens' CrlConfiguration (Maybe Text) Source #

Name inserted into the certificate CRL Distribution Points extension that enables the use of an alias for the CRL distribution point. Use this value if you don't want the name of your S3 bucket to be public.

ccExpirationInDays :: Lens' CrlConfiguration (Maybe Natural) Source #

Number of days until a certificate expires.

ccS3BucketName :: Lens' CrlConfiguration (Maybe Text) Source #

Name of the S3 bucket that contains the CRL. If you do not provide a value for the CustomCname argument, the name of your S3 bucket is placed into the CRL Distribution Points extension of the issued certificate. You can change the name of your bucket by calling the UpdateCertificateAuthority function. You must specify a bucket policy that allows ACM PCA to write the CRL to your bucket.

ccEnabled :: Lens' CrlConfiguration Bool Source #

Boolean value that specifies whether certificate revocation lists (CRLs) are enabled. You can use this value to enable certificate revocation for a new CA when you call the CreateCertificateAuthority function or for an existing CA when you call the UpdateCertificateAuthority function.

RevocationConfiguration

data RevocationConfiguration Source #

Certificate revocation information used by the CreateCertificateAuthority and UpdateCertificateAuthority functions. Your private certificate authority (CA) can create and maintain a certificate revocation list (CRL). A CRL contains information about certificates revoked by your CA. For more information, see RevokeCertificate .

See: revocationConfiguration smart constructor.

Instances

Eq RevocationConfiguration Source # 
Data RevocationConfiguration Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> RevocationConfiguration -> c RevocationConfiguration #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c RevocationConfiguration #

toConstr :: RevocationConfiguration -> Constr #

dataTypeOf :: RevocationConfiguration -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c RevocationConfiguration) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c RevocationConfiguration) #

gmapT :: (forall b. Data b => b -> b) -> RevocationConfiguration -> RevocationConfiguration #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> RevocationConfiguration -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> RevocationConfiguration -> r #

gmapQ :: (forall d. Data d => d -> u) -> RevocationConfiguration -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> RevocationConfiguration -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> RevocationConfiguration -> m RevocationConfiguration #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> RevocationConfiguration -> m RevocationConfiguration #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> RevocationConfiguration -> m RevocationConfiguration #

Read RevocationConfiguration Source # 
Show RevocationConfiguration Source # 
Generic RevocationConfiguration Source # 
Hashable RevocationConfiguration Source # 
ToJSON RevocationConfiguration Source # 
FromJSON RevocationConfiguration Source # 
NFData RevocationConfiguration Source # 

Methods

rnf :: RevocationConfiguration -> () #

type Rep RevocationConfiguration Source # 
type Rep RevocationConfiguration = D1 * (MetaData "RevocationConfiguration" "Network.AWS.CertificateManagerPCA.Types.Product" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" True) (C1 * (MetaCons "RevocationConfiguration'" PrefixI True) (S1 * (MetaSel (Just Symbol "_rcCrlConfiguration") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 * (Maybe CrlConfiguration))))

revocationConfiguration :: RevocationConfiguration Source #

Creates a value of RevocationConfiguration with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

  • rcCrlConfiguration - Configuration of the certificate revocation list (CRL), if any, maintained by your private CA.

rcCrlConfiguration :: Lens' RevocationConfiguration (Maybe CrlConfiguration) Source #

Configuration of the certificate revocation list (CRL), if any, maintained by your private CA.

Tag

data Tag Source #

Tags are labels that you can use to identify and organize your private CAs. Each tag consists of a key and an optional value. You can associate up to 50 tags with a private CA. To add one or more tags to a private CA, call the TagCertificateAuthority function. To remove a tag, call the UntagCertificateAuthority function.

See: tag smart constructor.

Instances

Eq Tag Source # 

Methods

(==) :: Tag -> Tag -> Bool #

(/=) :: Tag -> Tag -> Bool #

Data Tag Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> Tag -> c Tag #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c Tag #

toConstr :: Tag -> Constr #

dataTypeOf :: Tag -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c Tag) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c Tag) #

gmapT :: (forall b. Data b => b -> b) -> Tag -> Tag #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> Tag -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> Tag -> r #

gmapQ :: (forall d. Data d => d -> u) -> Tag -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> Tag -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> Tag -> m Tag #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> Tag -> m Tag #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> Tag -> m Tag #

Read Tag Source # 
Show Tag Source # 

Methods

showsPrec :: Int -> Tag -> ShowS #

show :: Tag -> String #

showList :: [Tag] -> ShowS #

Generic Tag Source # 

Associated Types

type Rep Tag :: * -> * #

Methods

from :: Tag -> Rep Tag x #

to :: Rep Tag x -> Tag #

Hashable Tag Source # 

Methods

hashWithSalt :: Int -> Tag -> Int #

hash :: Tag -> Int #

ToJSON Tag Source # 
FromJSON Tag Source # 
NFData Tag Source # 

Methods

rnf :: Tag -> () #

type Rep Tag Source # 
type Rep Tag = D1 * (MetaData "Tag" "Network.AWS.CertificateManagerPCA.Types.Product" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) (C1 * (MetaCons "Tag'" PrefixI True) ((:*:) * (S1 * (MetaSel (Just Symbol "_tagValue") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * (Maybe Text))) (S1 * (MetaSel (Just Symbol "_tagKey") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * Text))))

tag Source #

Arguments

:: Text

tagKey

-> Tag 

Creates a value of Tag with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

tagValue :: Lens' Tag (Maybe Text) Source #

Value of the tag.

tagKey :: Lens' Tag Text Source #

Key (name) of the tag.

Validity

data Validity Source #

Length of time for which the certificate issued by your private certificate authority (CA), or by the private CA itself, is valid in days, months, or years. You can issue a certificate by calling the IssueCertificate function.

See: validity smart constructor.

Instances

Eq Validity Source # 
Data Validity Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> Validity -> c Validity #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c Validity #

toConstr :: Validity -> Constr #

dataTypeOf :: Validity -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c Validity) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c Validity) #

gmapT :: (forall b. Data b => b -> b) -> Validity -> Validity #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> Validity -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> Validity -> r #

gmapQ :: (forall d. Data d => d -> u) -> Validity -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> Validity -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> Validity -> m Validity #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> Validity -> m Validity #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> Validity -> m Validity #

Read Validity Source # 
Show Validity Source # 
Generic Validity Source # 

Associated Types

type Rep Validity :: * -> * #

Methods

from :: Validity -> Rep Validity x #

to :: Rep Validity x -> Validity #

Hashable Validity Source # 

Methods

hashWithSalt :: Int -> Validity -> Int #

hash :: Validity -> Int #

ToJSON Validity Source # 
NFData Validity Source # 

Methods

rnf :: Validity -> () #

type Rep Validity Source # 
type Rep Validity = D1 * (MetaData "Validity" "Network.AWS.CertificateManagerPCA.Types.Product" "amazonka-certificatemanager-pca-1.6.0-745TdprsK5d4KxFM63j3hX" False) (C1 * (MetaCons "Validity'" PrefixI True) ((:*:) * (S1 * (MetaSel (Just Symbol "_vValue") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * Nat)) (S1 * (MetaSel (Just Symbol "_vType") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 * ValidityPeriodType))))

validity Source #

Creates a value of Validity with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

  • vValue - Time period.
  • vType - Specifies whether the Value parameter represents days, months, or years.

vType :: Lens' Validity ValidityPeriodType Source #

Specifies whether the Value parameter represents days, months, or years.