Skip to main content

Aws/certificatemanager

@swamp/aws/certificatemanagerv2026.10.25.1· AGPL-3.0-or-later· 1d agoBEHAVIORS
01README

AWS CERTIFICATEMANAGER infrastructure models

02Release Notes
  • Updated: acme_domain_validation
03Behaviors5
@swamp/aws/certificatemanager/accountv2026.10.23.1account.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?stringAWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?stringAWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?stringAWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?stringAWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
ExpiryEventsConfigurationobject
fn create()
Create a CertificateManager Account
fn get(identifier: string)
Get a CertificateManager Account
ArgumentTypeDescription
identifierstringThe primary identifier of the CertificateManager Account
fn update()
Update a CertificateManager Account
fn delete(identifier: string)
Delete a CertificateManager Account
ArgumentTypeDescription
identifierstringThe primary identifier of the CertificateManager Account
fn sync()
Sync CertificateManager Account state from AWS

Resources

state(infinite)— CertificateManager Account resource state
@swamp/aws/certificatemanager/acme-domain-validationv2026.10.25.1acme_domain_validation.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?stringAWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?stringAWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?stringAWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?stringAWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
AcmeEndpointArnstringThe ARN of the ACME endpoint this domain validation is associated with.
DomainNamestringThe domain name to validate.
PrevalidationOptionsobjectPrevalidation method configuration. Currently only DNS-based prevalidation is supported.
Tags?arrayTags associated with the domain validation.
fn create()
Create a CertificateManager AcmeDomainValidation
fn get(identifier: string)
Get a CertificateManager AcmeDomainValidation
ArgumentTypeDescription
identifierstringThe primary identifier of the CertificateManager AcmeDomainValidation
fn update()
Update a CertificateManager AcmeDomainValidation
fn delete(identifier: string)
Delete a CertificateManager AcmeDomainValidation
ArgumentTypeDescription
identifierstringThe primary identifier of the CertificateManager AcmeDomainValidation
fn sync()
Sync CertificateManager AcmeDomainValidation state from AWS
fn list(maxPages?: number, resourceModel?: string)
List CertificateManager AcmeDomainValidation resources
ArgumentTypeDescription
maxPages?numberMaximum number of pages to fetch (default: 10)
resourceModel?stringJSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— CertificateManager AcmeDomainValidation resource state
@swamp/aws/certificatemanager/acme-endpointv2026.10.23.1acme_endpoint.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?stringAWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?stringAWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?stringAWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?stringAWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
AuthorizationBehaviorstringThe authorization behavior for the ACME endpoint.
Contact?stringWhether contact information is required for the ACME endpoint.
CertificateAuthorityobjectThe certificate authority configuration for the ACME endpoint.
CertificateTags?arrayTags applied to certificates issued via this endpoint.
Tags?arrayTags associated with the ACME endpoint.
fn create()
Create a CertificateManager AcmeEndpoint
fn get(identifier: string)
Get a CertificateManager AcmeEndpoint
ArgumentTypeDescription
identifierstringThe primary identifier of the CertificateManager AcmeEndpoint
fn update()
Update a CertificateManager AcmeEndpoint
fn delete(identifier: string)
Delete a CertificateManager AcmeEndpoint
ArgumentTypeDescription
identifierstringThe primary identifier of the CertificateManager AcmeEndpoint
fn sync()
Sync CertificateManager AcmeEndpoint state from AWS
fn list(maxPages?: number, resourceModel?: string)
List CertificateManager AcmeEndpoint resources
ArgumentTypeDescription
maxPages?numberMaximum number of pages to fetch (default: 10)
resourceModel?stringJSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— CertificateManager AcmeEndpoint resource state
@swamp/aws/certificatemanager/acme-external-account-bindingv2026.10.23.1acme_external_account_binding.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?stringAWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?stringAWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?stringAWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?stringAWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
AcmeEndpointArnstringThe ARN of the ACME endpoint this binding is associated with.
RoleArnstringThe IAM role ARN for cross-account access.
Expiration?objectThe expiration configuration for the external account binding.
Tags?arrayTags associated with the external account binding.
fn create()
Create a CertificateManager AcmeExternalAccountBinding
fn get(identifier: string)
Get a CertificateManager AcmeExternalAccountBinding
ArgumentTypeDescription
identifierstringThe primary identifier of the CertificateManager AcmeExternalAccountBinding
fn update()
Update a CertificateManager AcmeExternalAccountBinding
fn delete(identifier: string)
Delete a CertificateManager AcmeExternalAccountBinding
ArgumentTypeDescription
identifierstringThe primary identifier of the CertificateManager AcmeExternalAccountBinding
fn sync()
Sync CertificateManager AcmeExternalAccountBinding state from AWS
fn list(maxPages?: number, resourceModel?: string)
List CertificateManager AcmeExternalAccountBinding resources
ArgumentTypeDescription
maxPages?numberMaximum number of pages to fetch (default: 10)
resourceModel?stringJSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— CertificateManager AcmeExternalAccountBinding resource state
@swamp/aws/certificatemanager/certificatev2026.10.24.2certificate.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?stringAWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?stringAWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?stringAWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?stringAWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
CertificateAuthorityArn?stringThe Amazon Resource Name (ARN) of the private certificate authority (CA) that will be used to issue the certificate.
CertificateTransparencyLoggingPreference?enumYou can opt out of certificate transparency logging by specifying the DISABLED option. Opt in by specifying ENABLED.
DomainNamestringThe fully qualified domain name (FQDN), such as www.example.com, with which you want to secure an ACM certificate
DomainValidationOptions?arrayDomain information that domain name registrars use to verify your identity.
KeyAlgorithm?stringSpecifies the algorithm of the public and private key pair that your certificate uses to encrypt data.
Tags?arrayKey-value pairs that can identify the certificate.
SubjectAlternativeNames?arrayAdditional FQDNs to be included in the Subject Alternative Name extension of the ACM certificate.
ValidationMethod?stringThe method you want to use to validate that you own or control the domain associated with a public certificate. Valid values are DNS, EMAIL or HTTP
CertificateExport?enumSpecifies whether the certificate can be exported. ENABLED allows the certificate to be exported, DISABLED prevents export.
fn create()
Create a CertificateManager Certificate
fn get(identifier: string)
Get a CertificateManager Certificate
ArgumentTypeDescription
identifierstringThe primary identifier of the CertificateManager Certificate
fn update()
Update a CertificateManager Certificate
fn delete(identifier: string)
Delete a CertificateManager Certificate
ArgumentTypeDescription
identifierstringThe primary identifier of the CertificateManager Certificate
fn sync()
Sync CertificateManager Certificate state from AWS
fn list(maxPages?: number, resourceModel?: string)
List CertificateManager Certificate resources
ArgumentTypeDescription
maxPages?numberMaximum number of pages to fetch (default: 10)
resourceModel?stringJSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— CertificateManager Certificate resource state
04Previous Versions19
2026.10.24.2AGPL-3.0-or-later
  • Updated: certificate
2026.10.24.1AGPL-3.0-or-later
  • Updated: certificate
2026.10.23.1AGPL-3.0-or-later(was none)
  • Updated: account, acme_domain_validation, acme_endpoint, acme_external_account_binding, certificate
2026.10.13.1
  • Updated: account, acme_domain_validation, acme_endpoint, acme_external_account_binding, certificate
2026.10.08.1
2026.10.06.1
2026.10.04.1
2026.10.03.1
2026.10.02.1
2026.10.01.1
2026.09.30.1
2026.09.29.1
2026.09.28.1
2026.09.27.1
2026.09.26.1
2026.09.25.1
2026.09.24.1
2026.09.23.1
2026.09.22.1
05Stats
A
100 / 100
Downloads
72
Archive size
1.0 MB
Verified by Swamp
  • Has README or module doc2/2earned
  • README has a code example1/1earned
  • README is substantive1/1earned
  • Most symbols documented1/1earned
  • No slow types (deprecated)1/1earned
  • Dependencies pass trust audit2/2earned
  • Docs keep secrets in a vault1/1earned
  • Has description1/1earned
  • Platform support declared (or universal)2/2earned
  • License2/2earned
  • Verified public repository2/2earned
06Platforms
07Labels