AWS::ACMPCA::CertificateAuthority OcspConfiguration
Contains information to enable and configure Online Certificate Status Protocol (OCSP) for validating certificate revocation status.
Syntax
To declare this entity in your Amazon CloudFormation template, use the following syntax:
JSON
{ "Enabled" :
Boolean
, "OcspCustomCname" :String
}
YAML
Enabled:
Boolean
OcspCustomCname:String
Properties
Enabled
-
Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.
Required: No
Type: Boolean
Update requires: No interruption
OcspCustomCname
-
By default, ACM Private CA injects an Amazon domain into certificates being validated by the Online Certificate Status Protocol (OCSP). A customer can alternatively use this object to define a CNAME specifying a customized OCSP domain.
Note: The value of the CNAME must not include a protocol prefix such as "http://" or "https://".
Required: No
Type: String
Minimum:
0
Maximum:
253
Update requires: No interruption