@aws-cdk/aws-certificatemanager
Advanced tools
This package provides Constructs for provisioning and referencing certificates which can be used in CloudFront and ELB.
The following requests a certificate for a given domain:
After requesting a certificate, you will need to prove that you own the domain in question before the certificate will be granted. The CloudFormation deployment will wait until this verification process has been completed.
Because of this wait time, when using manual validation methods, it's better to provision your certificates either in a separate stack from your main service, or provision them manually and import them into your CDK application.
Email-validated certificates (the default) are validated by receiving an email on one of a number of predefined domains and following the instructions in the email.
See Validate with Email in the AWS Certificate Manager User Guide.
If Amazon Route 53 is your DNS provider for the requested domain, the DNS record can be created automatically:
new Certificate(this, 'Certificate', {
domainName: 'hello.example.com',
validation: CertificateValidation.fromDns(myHostedZone), // Route 53 hosted zone
});
Otherwise DNS records must be added manually and the stack will not complete creating until the records are added.
new Certificate(this, 'Certificate', {
domainName: 'hello.example.com',
validation: CertificateValidation.fromDns(), // Records must be added manually
});
See also Validate with DNS in the AWS Certificate Manager User Guide.
When working with multiple domains, use the CertificateValidation.fromDnsMultiZone():
multiple domains DNS validation
Use the DnsValidatedCertificate construct for cross-region certificate creation:
new DnsValidatedCertificate(this, 'CrossRegionCertificate', {
domainName: 'hello.example.com',
hostedZone: myHostedZone,
region: 'us-east-1',
});
This is useful when deploying a stack in a region other than us-east-1 with a
certificate for a CloudFront distribution.
If cross-region is not needed, the recommended solution is to use the
Certificate construct which uses a native CloudFormation implementation.
If you want to import an existing certificate, you can do so from its ARN:
const arn = "arn:aws:...";
const certificate = Certificate.fromCertificateArn(this, 'Certificate', arn);
To share the certificate between stacks in the same CDK application, simply
pass the Certificate object between the stacks.
1.57.0 (2020-08-07)
bind() on
IHttpRouteIntegration has changed to accept one of type
HttpRouteIntegrationBindOptions. The previous parameter
IHttpRoute is now a property inside the new parameter under
the key route.eks.Cluster construct no longer supports setting kubectlEnabled: false. A temporary drop-in alternative is eks.LegacyCluster, but we have plans to completely remove support for it in an upcoming release since eks.Cluster has matured and should provide all the needed capabilities. Please comment on https://github.com/aws/aws-cdk/issues/9332 if there are use cases that are not supported by eks.Cluster.lambda.Version and apigateway.Deployment resources with auto-generated IDs will be replaced as we fixed a bug which ignored resource dependencies when generating these logical IDs.node.path of constructs within stacks created the root of the tree via new Stack() will now have a prefix Default/ which represents an implicit App root.Related: https://github.com/aws/aws-cdk-rfcs/issues/192
apigatewayv2: cyclic dependency between HttpApi and the lambda function (#9100) (7b29774), closes #9075
athena: WorkGroup tags corruption (#9085) (b688913), closes #6936
aws-lambda-python: use cp instead of rsync (#9355) (056bcaf), closes #9349
cfn-include: no longer concatenate elements of Fn::Join without tokens (#9476) (d038b61)
core: can't have multiple CfnRules in a Stack (#9500) (76a7bfd), closes #8251 #9485
core: docs for CfnMapping are not clear (#9451) (c1e3c57), closes #9432
dynamodb: allow using PhysicalName.GENERATE_IF_NEEDED as the Table name (#9377) (8ab7b10), closes #9374
ecs: Scope-down IAM permissions for ECS drain (#9502) (9fbeec3)
ecs: Scope-down IAM permissions on Cluster ASG (#9493) (1670289)
ecs-patterns: Adds missing option to secure ingress of ALB in Ap… (#9434) (ba1427f)
lambda: bundling docker image does not exist for Go runtime (#9465) (7666d9b), closes #9435
cloudfront: remove the originId property from OriginBase (#9380) (70b9f63)
do not use "synthesize" and "prepare" in the cdk (#9410) (e3ae645), closes /github.com/aws/aws-cdk/pull/9410#issuecomment-668552361
FAQs
The CDK Construct Library for AWS::CertificateManager
The npm package @aws-cdk/aws-certificatemanager receives a total of 59,122 weekly downloads. As such, @aws-cdk/aws-certificatemanager popularity was classified as popular.
We found that @aws-cdk/aws-certificatemanager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket is tracking a new trend where malicious actors are now exploiting the popularity of LLM research to spread malware through seemingly useful open source packages.
Security News
Research
Noxia, a new dark web bulletproof host, offers dirt cheap servers for Python, Node.js, Go, and Rust, enabling cybercriminals to distribute malware and execute supply chain attacks.
Company News
Socket safeguards companies from software supply chain attacks by detecting and preventing threats in open source code and empowering developers to secure their applications and critical services against malware and other security risks.