Skip to content

ServerCertificateConfiguration

Source code in docs_src/capo_network_firewall/types/server_certificate_configuration.py 
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
class ServerCertificateConfiguration(TypedDict, closed=True):
    server_certificates: NotRequired[
        "capo_network_firewall.types.server_certificates.ServerCertificates"
    ]
    """<p>The list of server certificates to use for inbound SSL/TLS inspection.</p>"""
    scopes: NotRequired[
        "capo_network_firewall.types.server_certificate_scopes.ServerCertificateScopes"
    ]
    """<p>A list of scopes.</p>"""
    certificate_authority_arn: NotRequired[
        "capo_network_firewall.types.resource_arn.ResourceArn"
    ]
    """<p>The Amazon Resource Name (ARN) of the imported certificate authority (CA) certificate within Certificate Manager (ACM) to use for outbound SSL/TLS inspection.</p> <p>The following limitations apply:</p> <ul> <li> <p>You can use CA certificates that you imported into ACM, but you can't generate CA certificates with ACM.</p> </li> <li> <p>You can't use certificates issued by Private Certificate Authority.</p> </li> </ul> <p>For more information about configuring certificates for outbound inspection, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html">Using SSL/TLS certificates with TLS inspection configurations</a> in the <i>Network Firewall Developer Guide</i>. </p> <p>For information about working with certificates in ACM, see <a href="https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html">Importing certificates</a> in the <i>Certificate Manager User Guide</i>.</p>"""
    check_certificate_revocation_status: NotRequired[
        "capo_network_firewall.types.check_certificate_revocation_status_actions.CheckCertificateRevocationStatusActions"
    ]
    """<p>When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a <code>CertificateAuthorityArn</code> in <a>ServerCertificateConfiguration</a>.</p>"""

certificate_authority_arn instance-attribute 

certificate_authority_arn: NotRequired[ResourceArn]

The Amazon Resource Name (ARN) of the imported certificate authority (CA) certificate within Certificate Manager (ACM) to use for outbound SSL/TLS inspection.

The following limitations apply:

  • You can use CA certificates that you imported into ACM, but you can't generate CA certificates with ACM.

  • You can't use certificates issued by Private Certificate Authority.

For more information about configuring certificates for outbound inspection, see Using SSL/TLS certificates with TLS inspection configurations in the Network Firewall Developer Guide.

For information about working with certificates in ACM, see Importing certificates in the Certificate Manager User Guide.

check_certificate_revocation_status instance-attribute 

check_certificate_revocation_status: NotRequired[
    CheckCertificateRevocationStatusActions
]

When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a CertificateAuthorityArn in ServerCertificateConfiguration.

scopes instance-attribute 

scopes: NotRequired[ServerCertificateScopes]

A list of scopes.

server_certificates instance-attribute 

server_certificates: NotRequired[ServerCertificates]

The list of server certificates to use for inbound SSL/TLS inspection.