AWS::IoT::CertificateProvider - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).


Creates a certificate provider. Amazon IoT Core certificate provider lets you customize how to sign a certificate signing request (CSR) in fleet provisioning. For more information, see Self-managed certificate signing using Amazon IoT Corecertificate provider from the Amazon IoT Core Developer Guide.


To declare this entity in your Amazon CloudFormation template, use the following syntax:


{ "Type" : "AWS::IoT::CertificateProvider", "Properties" : { "AccountDefaultForOperations" : [ String, ... ], "CertificateProviderName" : String, "LambdaFunctionArn" : String, "Tags" : [ Tag, ... ] } }


Type: AWS::IoT::CertificateProvider Properties: AccountDefaultForOperations: - String CertificateProviderName: String LambdaFunctionArn: String Tags: - Tag



A list of the operations that the certificate provider will use to generate certificates. Valid value: CreateCertificateFromCsr.

Required: Yes

Type: Array of String

Minimum: 1

Maximum: 1

Update requires: No interruption


The name of the certificate provider.

Required: No

Type: String

Pattern: [\w=,@-]+

Minimum: 1

Maximum: 128

Update requires: Replacement


The ARN of the Lambda function.

Required: Yes

Type: String

Minimum: 1

Maximum: 170

Update requires: No interruption


Metadata that can be used to manage the certificate provider.

Required: No

Type: Array of Tag

Maximum: 50

Update requires: No interruption

Return values


When you pass the logical ID of this resource to the intrinsic Ref function, Ref returns the ID of the certificate provider. For example:

{ "Ref": "MyCertificateProvider" }

A value similar to the following is returned:


For more information about using the Ref function, see Ref.


The Fn::GetAtt intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the Fn::GetAtt intrinsic function, see Fn::GetAtt.


Returns the Amazon Resource Name (ARN) for the certificate. For example:

{ "Fn::GetAtt": ["MyCertificateProvider", "Arn"] }

A value similar to the following is returned: