NAME

Paws::ACMPCA::CertificateAuthority

USAGE

This class represents one of two things:

Arguments in a call to a service

Use the attributes of this class as arguments to methods. You shouldn't make instances of this class. Each attribute should be used as a named argument in the calls that expect this type of object.

As an example, if Att1 is expected to be a Paws::ACMPCA::CertificateAuthority object:

  $service_obj->Method(Att1 => { Arn => $value, ..., Type => $value  });

Results returned from an API call

Use accessors for each attribute. If Att1 is expected to be an Paws::ACMPCA::CertificateAuthority object:

  $result = $service_obj->Method(...);
  $result->Att1->Arn

DESCRIPTION

Contains information about your private certificate authority (CA). Your private CA can issue and revoke X.509 digital certificates. Digital certificates verify that the entity named in the certificate Subject field owns or controls the public key contained in the Subject Public Key Info field. Call the CreateCertificateAuthority (https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CreateCertificateAuthority.html) action to create your private CA. You must then call the GetCertificateAuthorityCertificate (https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_GetCertificateAuthorityCertificate.html) action to retrieve a private CA certificate signing request (CSR). Sign the CSR with your ACM Private CA-hosted or on-premises root or subordinate CA certificate. Call the ImportCertificateAuthorityCertificate (https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_ImportCertificateAuthorityCertificate.html) action to import the signed certificate into AWS Certificate Manager (ACM).

ATTRIBUTES

Arn => Str

Amazon Resource Name (ARN) for your private certificate authority (CA). The format is " 12345678-1234-1234-1234-123456789012 ".

CertificateAuthorityConfiguration => Paws::ACMPCA::CertificateAuthorityConfiguration

Your private CA configuration.

CreatedAt => Str

Date and time at which your private CA was created.

FailureReason => Str

Reason the request to create your private CA failed.

KeyStorageSecurityStandard => Str

Defines a cryptographic key management compliance standard used for handling CA keys.

Default: FIPS_140_2_LEVEL_3_OR_HIGHER

Note: AWS Region ap-northeast-3 supports only FIPS_140_2_LEVEL_2_OR_HIGHER. You must explicitly specify this parameter and value when creating a CA in that Region. Specifying a different value (or no value) results in an "InvalidArgsException" with the message "A certificate authority cannot be created in this region with the specified security standard."

LastStateChangeAt => Str

Date and time at which your private CA was last updated.

NotAfter => Str

Date and time after which your private CA certificate is not valid.

NotBefore => Str

Date and time before which your private CA certificate is not valid.

OwnerAccount => Str

The AWS account ID that owns the certificate authority.

RestorableUntil => Str

The period during which a deleted CA can be restored. For more information, see the "PermanentDeletionTimeInDays" parameter of the DeleteCertificateAuthorityRequest (https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_DeleteCertificateAuthorityRequest.html) action.

BUGS and CONTRIBUTIONS

The source code is located here: <https://github.com/pplu/aws-sdk-perl>

Please report bugs to: <https://github.com/pplu/aws-sdk-perl/issues>