Skip to content

Creates a trust anchor to establish trust between IAM Roles Anywhere and your certificate authority (CA)

Description

Creates a trust anchor to establish trust between IAM Roles Anywhere and your certificate authority (CA). You can define a trust anchor as a reference to an Private Certificate Authority (Private CA) or by uploading a CA certificate. Your Amazon Web Services workloads can authenticate with the trust anchor using certificates issued by the CA in exchange for temporary Amazon Web Services credentials.

Required permissions: rolesanywhere:CreateTrustAnchor.

Usage

iamrolesanywhere_create_trust_anchor(name, source, enabled, tags,
  notificationSettings)

Arguments

  • name

    [required] The name of the trust anchor.

  • source

    [required] The trust anchor type and its related certificate data.

  • enabled

    Specifies whether the trust anchor is enabled.

  • tags

    The tags to attach to the trust anchor.

  • notificationSettings

    A list of notification settings to be associated to the trust anchor.

Value

A list with the following syntax:

list(
  trustAnchor = list(
    trustAnchorId = "string",
    trustAnchorArn = "string",
    name = "string",
    source = list(
      sourceType = "AWS_ACM_PCA"|"CERTIFICATE_BUNDLE"|"SELF_SIGNED_REPOSITORY",
      sourceData = list(
        x509CertificateData = "string",
        acmPcaArn = "string"
      )
    ),
    enabled = TRUE|FALSE,
    createdAt = as.POSIXct(
      "2015-01-01"
    ),
    updatedAt = as.POSIXct(
      "2015-01-01"
    ),
    notificationSettings = list(
      list(
        enabled = TRUE|FALSE,
        event = "CA_CERTIFICATE_EXPIRY"|"END_ENTITY_CERTIFICATE_EXPIRY",
        threshold = 123,
        channel = "ALL",
        configuredBy = "string"
      )
    )
  )
)

Request syntax

svc$create_trust_anchor(
  name = "string",
  source = list(
    sourceType = "AWS_ACM_PCA"|"CERTIFICATE_BUNDLE"|"SELF_SIGNED_REPOSITORY",
    sourceData = list(
      x509CertificateData = "string",
      acmPcaArn = "string"
    )
  ),
  enabled = TRUE|FALSE,
  tags = list(
    list(
      key = "string",
      value = "string"
    )
  ),
  notificationSettings = list(
    list(
      enabled = TRUE|FALSE,
      event = "CA_CERTIFICATE_EXPIRY"|"END_ENTITY_CERTIFICATE_EXPIRY",
      threshold = 123,
      channel = "ALL"
    )
  )
)