Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. ec2
  5. EnclaveCertificateIamRoleAssociation

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native

aws-native.ec2.EnclaveCertificateIamRoleAssociation

Explore with Pulumi AI

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native

Associates an AWS Identity and Access Management (IAM) role with an AWS Certificate Manager (ACM) certificate. This association is based on Amazon Resource Names and it enables the certificate to be used by the ACM for Nitro Enclaves application inside an enclave.

Example Usage

Example

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AwsNative = Pulumi.AwsNative;

return await Deployment.RunAsync(() => 
{
    var myEnclaveCertificateIamRoleAssociation = new AwsNative.Ec2.EnclaveCertificateIamRoleAssociation("myEnclaveCertificateIamRoleAssociation", new()
    {
        CertificateArn = "arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE",
        RoleArn = "arn:aws:iam::123456789012:role/my-acm-role",
    });

});
Copy
package main

import (
	"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ec2.NewEnclaveCertificateIamRoleAssociation(ctx, "myEnclaveCertificateIamRoleAssociation", &ec2.EnclaveCertificateIamRoleAssociationArgs{
			CertificateArn: pulumi.String("arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE"),
			RoleArn:        pulumi.String("arn:aws:iam::123456789012:role/my-acm-role"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy

Coming soon!

import * as pulumi from "@pulumi/pulumi";
import * as aws_native from "@pulumi/aws-native";

const myEnclaveCertificateIamRoleAssociation = new aws_native.ec2.EnclaveCertificateIamRoleAssociation("myEnclaveCertificateIamRoleAssociation", {
    certificateArn: "arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE",
    roleArn: "arn:aws:iam::123456789012:role/my-acm-role",
});
Copy
import pulumi
import pulumi_aws_native as aws_native

my_enclave_certificate_iam_role_association = aws_native.ec2.EnclaveCertificateIamRoleAssociation("myEnclaveCertificateIamRoleAssociation",
    certificate_arn="arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE",
    role_arn="arn:aws:iam::123456789012:role/my-acm-role")
Copy

Coming soon!

Example

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AwsNative = Pulumi.AwsNative;

return await Deployment.RunAsync(() => 
{
    var myCertAssociation = new AwsNative.Ec2.EnclaveCertificateIamRoleAssociation("myCertAssociation", new()
    {
        CertificateArn = "arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE",
        RoleArn = "arn:aws:iam::123456789012:role/my-acm-role",
    });

});
Copy
package main

import (
	"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ec2.NewEnclaveCertificateIamRoleAssociation(ctx, "myCertAssociation", &ec2.EnclaveCertificateIamRoleAssociationArgs{
			CertificateArn: pulumi.String("arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE"),
			RoleArn:        pulumi.String("arn:aws:iam::123456789012:role/my-acm-role"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy

Coming soon!

import * as pulumi from "@pulumi/pulumi";
import * as aws_native from "@pulumi/aws-native";

const myCertAssociation = new aws_native.ec2.EnclaveCertificateIamRoleAssociation("myCertAssociation", {
    certificateArn: "arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE",
    roleArn: "arn:aws:iam::123456789012:role/my-acm-role",
});
Copy
import pulumi
import pulumi_aws_native as aws_native

my_cert_association = aws_native.ec2.EnclaveCertificateIamRoleAssociation("myCertAssociation",
    certificate_arn="arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE",
    role_arn="arn:aws:iam::123456789012:role/my-acm-role")
Copy

Coming soon!

Create EnclaveCertificateIamRoleAssociation Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new EnclaveCertificateIamRoleAssociation(name: string, args: EnclaveCertificateIamRoleAssociationArgs, opts?: CustomResourceOptions);
@overload
def EnclaveCertificateIamRoleAssociation(resource_name: str,
                                         args: EnclaveCertificateIamRoleAssociationArgs,
                                         opts: Optional[ResourceOptions] = None)

@overload
def EnclaveCertificateIamRoleAssociation(resource_name: str,
                                         opts: Optional[ResourceOptions] = None,
                                         certificate_arn: Optional[str] = None,
                                         role_arn: Optional[str] = None)
func NewEnclaveCertificateIamRoleAssociation(ctx *Context, name string, args EnclaveCertificateIamRoleAssociationArgs, opts ...ResourceOption) (*EnclaveCertificateIamRoleAssociation, error)
public EnclaveCertificateIamRoleAssociation(string name, EnclaveCertificateIamRoleAssociationArgs args, CustomResourceOptions? opts = null)
public EnclaveCertificateIamRoleAssociation(String name, EnclaveCertificateIamRoleAssociationArgs args)
public EnclaveCertificateIamRoleAssociation(String name, EnclaveCertificateIamRoleAssociationArgs args, CustomResourceOptions options)

type: aws-native:ec2:EnclaveCertificateIamRoleAssociation
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. EnclaveCertificateIamRoleAssociationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. EnclaveCertificateIamRoleAssociationArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. EnclaveCertificateIamRoleAssociationArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. EnclaveCertificateIamRoleAssociationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. EnclaveCertificateIamRoleAssociationArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

EnclaveCertificateIamRoleAssociation Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The EnclaveCertificateIamRoleAssociation resource accepts the following input properties:

CertificateArn This property is required. string
The Amazon Resource Name (ARN) of the ACM certificate with which to associate the IAM role.
RoleArn This property is required. string
The Amazon Resource Name (ARN) of the IAM role to associate with the ACM certificate. You can associate up to 16 IAM roles with an ACM certificate.
CertificateArn This property is required. string
The Amazon Resource Name (ARN) of the ACM certificate with which to associate the IAM role.
RoleArn This property is required. string
The Amazon Resource Name (ARN) of the IAM role to associate with the ACM certificate. You can associate up to 16 IAM roles with an ACM certificate.
certificateArn This property is required. String
The Amazon Resource Name (ARN) of the ACM certificate with which to associate the IAM role.
roleArn This property is required. String
The Amazon Resource Name (ARN) of the IAM role to associate with the ACM certificate. You can associate up to 16 IAM roles with an ACM certificate.
certificateArn This property is required. string
The Amazon Resource Name (ARN) of the ACM certificate with which to associate the IAM role.
roleArn This property is required. string
The Amazon Resource Name (ARN) of the IAM role to associate with the ACM certificate. You can associate up to 16 IAM roles with an ACM certificate.
certificate_arn This property is required. str
The Amazon Resource Name (ARN) of the ACM certificate with which to associate the IAM role.
role_arn This property is required. str
The Amazon Resource Name (ARN) of the IAM role to associate with the ACM certificate. You can associate up to 16 IAM roles with an ACM certificate.
certificateArn This property is required. String
The Amazon Resource Name (ARN) of the ACM certificate with which to associate the IAM role.
roleArn This property is required. String
The Amazon Resource Name (ARN) of the IAM role to associate with the ACM certificate. You can associate up to 16 IAM roles with an ACM certificate.

Outputs

All input properties are implicitly available as output properties. Additionally, the EnclaveCertificateIamRoleAssociation resource produces the following output properties:

CertificateS3BucketName string
The name of the Amazon S3 bucket to which the certificate was uploaded.
CertificateS3ObjectKey string
The Amazon S3 object key where the certificate, certificate chain, and encrypted private key bundle are stored.
EncryptionKmsKeyId string
The ID of the AWS KMS CMK used to encrypt the private key of the certificate.
Id string
The provider-assigned unique ID for this managed resource.
CertificateS3BucketName string
The name of the Amazon S3 bucket to which the certificate was uploaded.
CertificateS3ObjectKey string
The Amazon S3 object key where the certificate, certificate chain, and encrypted private key bundle are stored.
EncryptionKmsKeyId string
The ID of the AWS KMS CMK used to encrypt the private key of the certificate.
Id string
The provider-assigned unique ID for this managed resource.
certificateS3BucketName String
The name of the Amazon S3 bucket to which the certificate was uploaded.
certificateS3ObjectKey String
The Amazon S3 object key where the certificate, certificate chain, and encrypted private key bundle are stored.
encryptionKmsKeyId String
The ID of the AWS KMS CMK used to encrypt the private key of the certificate.
id String
The provider-assigned unique ID for this managed resource.
certificateS3BucketName string
The name of the Amazon S3 bucket to which the certificate was uploaded.
certificateS3ObjectKey string
The Amazon S3 object key where the certificate, certificate chain, and encrypted private key bundle are stored.
encryptionKmsKeyId string
The ID of the AWS KMS CMK used to encrypt the private key of the certificate.
id string
The provider-assigned unique ID for this managed resource.
certificate_s3_bucket_name str
The name of the Amazon S3 bucket to which the certificate was uploaded.
certificate_s3_object_key str
The Amazon S3 object key where the certificate, certificate chain, and encrypted private key bundle are stored.
encryption_kms_key_id str
The ID of the AWS KMS CMK used to encrypt the private key of the certificate.
id str
The provider-assigned unique ID for this managed resource.
certificateS3BucketName String
The name of the Amazon S3 bucket to which the certificate was uploaded.
certificateS3ObjectKey String
The Amazon S3 object key where the certificate, certificate chain, and encrypted private key bundle are stored.
encryptionKmsKeyId String
The ID of the AWS KMS CMK used to encrypt the private key of the certificate.
id String
The provider-assigned unique ID for this managed resource.

Package Details

Repository
AWS Native pulumi/pulumi-aws-native
License
Apache-2.0

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native