Struct aws_sdk_acmpca::types::CertificateAuthority

#[non_exhaustive]
pub struct CertificateAuthority {

    pub arn: Option<String>,
    pub owner_account: Option<String>,
    pub created_at: Option<DateTime>,
    pub last_state_change_at: Option<DateTime>,
    pub type: Option<CertificateAuthorityType>,
    pub serial: Option<String>,
    pub status: Option<CertificateAuthorityStatus>,
    pub not_before: Option<DateTime>,
    pub not_after: Option<DateTime>,
    pub failure_reason: Option<FailureReason>,
    pub certificate_authority_configuration: Option<CertificateAuthorityConfiguration>,
    pub revocation_configuration: Option<RevocationConfiguration>,
    pub restorable_until: Option<DateTime>,
    pub key_storage_security_standard: Option<KeyStorageSecurityStandard>,
    pub usage_mode: Option<CertificateAuthorityUsageMode>,
}

Contains information about your private certificate authority (CA). Your private CA can issue and revoke X.509 digital certificates. Digital certificates verify that the entity named in the certificate Subject field owns or controls the public key contained in the Subject Public Key Info field. Call the CreateCertificateAuthority action to create your private CA. You must then call the GetCertificateAuthorityCertificate action to retrieve a private CA certificate signing request (CSR). Sign the CSR with your Amazon Web Services Private CA-hosted or on-premises root or subordinate CA certificate. Call the ImportCertificateAuthorityCertificate action to import the signed certificate into Certificate Manager (ACM).

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

arn: Option<String>

Amazon Resource Name (ARN) for your private certificate authority (CA). The format is 12345678-1234-1234-1234-123456789012 .

owner_account: Option<String>

The Amazon Web Services account ID that owns the certificate authority.

created_at: Option<DateTime>

Date and time at which your private CA was created.

last_state_change_at: Option<DateTime>

Date and time at which your private CA was last updated.

type: Option<CertificateAuthorityType>

Type of your private CA.

serial: Option<String>

Serial number of your private CA.

status: Option<CertificateAuthorityStatus>

Status of your private CA.

not_before: Option<DateTime>

Date and time before which your private CA certificate is not valid.

not_after: Option<DateTime>

Date and time after which your private CA certificate is not valid.

failure_reason: Option<FailureReason>

Reason the request to create your private CA failed.

certificate_authority_configuration: Option<CertificateAuthorityConfiguration>

Your private CA configuration.

revocation_configuration: Option<RevocationConfiguration>

Information about the Online Certificate Status Protocol (OCSP) configuration or certificate revocation list (CRL) created and maintained by your private CA.

restorable_until: Option<DateTime>

The period during which a deleted CA can be restored. For more information, see the PermanentDeletionTimeInDays parameter of the DeleteCertificateAuthorityRequest action.

key_storage_security_standard: Option<KeyStorageSecurityStandard>

Defines a cryptographic key management compliance standard used for handling CA keys.

Default: FIPS_140_2_LEVEL_3_OR_HIGHER

Note: Amazon Web Services Region ap-northeast-3 supports only FIPS_140_2_LEVEL_2_OR_HIGHER. You must explicitly specify this parameter and value when creating a CA in that Region. Specifying a different value (or no value) results in an InvalidArgsException with the message "A certificate authority cannot be created in this region with the specified security standard."

usage_mode: Option<CertificateAuthorityUsageMode>

Specifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly. Short-lived certificate validity is limited to seven days.

The default value is GENERAL_PURPOSE.

Implementations

impl CertificateAuthority

pub fn arn(&self) -> Option<&str>

Amazon Resource Name (ARN) for your private certificate authority (CA). The format is 12345678-1234-1234-1234-123456789012 .

pub fn owner_account(&self) -> Option<&str>

The Amazon Web Services account ID that owns the certificate authority.

pub fn created_at(&self) -> Option<&DateTime>

Date and time at which your private CA was created.

pub fn last_state_change_at(&self) -> Option<&DateTime>

Date and time at which your private CA was last updated.

pub fn type(&self) -> Option<&CertificateAuthorityType>

Type of your private CA.

pub fn serial(&self) -> Option<&str>

Serial number of your private CA.

pub fn status(&self) -> Option<&CertificateAuthorityStatus>

Status of your private CA.

pub fn not_before(&self) -> Option<&DateTime>

Date and time before which your private CA certificate is not valid.

pub fn not_after(&self) -> Option<&DateTime>

Date and time after which your private CA certificate is not valid.

pub fn failure_reason(&self) -> Option<&FailureReason>

Reason the request to create your private CA failed.

pub fn certificate_authority_configuration( &self ) -> Option<&CertificateAuthorityConfiguration>

Your private CA configuration.

pub fn revocation_configuration(&self) -> Option<&RevocationConfiguration>

Information about the Online Certificate Status Protocol (OCSP) configuration or certificate revocation list (CRL) created and maintained by your private CA.

pub fn restorable_until(&self) -> Option<&DateTime>

The period during which a deleted CA can be restored. For more information, see the PermanentDeletionTimeInDays parameter of the DeleteCertificateAuthorityRequest action.

pub fn key_storage_security_standard( &self ) -> Option<&KeyStorageSecurityStandard>

Defines a cryptographic key management compliance standard used for handling CA keys.

Default: FIPS_140_2_LEVEL_3_OR_HIGHER

Note: Amazon Web Services Region ap-northeast-3 supports only FIPS_140_2_LEVEL_2_OR_HIGHER. You must explicitly specify this parameter and value when creating a CA in that Region. Specifying a different value (or no value) results in an InvalidArgsException with the message "A certificate authority cannot be created in this region with the specified security standard."

pub fn usage_mode(&self) -> Option<&CertificateAuthorityUsageMode>

Specifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly. Short-lived certificate validity is limited to seven days.

The default value is GENERAL_PURPOSE.

impl CertificateAuthority

pub fn builder() -> CertificateAuthorityBuilder

Creates a new builder-style object to manufacture CertificateAuthority.

Trait Implementations

impl Clone for CertificateAuthority

fn clone(&self) -> CertificateAuthority

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertificateAuthority

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for CertificateAuthority

fn eq(&self, other: &CertificateAuthority) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for CertificateAuthority