AWS::PCAConnectorSCEP::Challenge
For general-purpose connectors. Creates a challenge password for the specified connector. The SCEP protocol uses a challenge password to authenticate a request before issuing a certificate from a certificate authority (CA). Your SCEP clients include the challenge password as part of their certificate request to Connector for SCEP. To retrieve the connector Amazon Resource Names (ARNs) for the connectors in your account, call ListConnectors.
To create additional challenge passwords for the connector, call CreateChallenge
again. We recommend frequently rotating your challenge passwords.
Syntax
To declare this entity in your Amazon CloudFormation template, use the following syntax:
JSON
{ "Type" : "AWS::PCAConnectorSCEP::Challenge", "Properties" : { "ConnectorArn" :
String
, "Tags" :{
} }Key
:Value
, ...}
YAML
Type: AWS::PCAConnectorSCEP::Challenge Properties: ConnectorArn:
String
Tags:
Key
:Value
Properties
ConnectorArn
-
The Amazon Resource Name (ARN) of the connector.
Required: Yes
Type: String
Pattern:
^arn:aws(-[a-z]+)*:pca-connector-scep:[a-z]+(-[a-z]+)+-[1-9]\d*:\d{12}:connector\/[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}$
Minimum:
5
Maximum:
200
Update requires: Replacement
Property description not available.
Required: No
Type: Object of String
Pattern:
.+
Update requires: No interruption
Return values
Ref
Fn::GetAtt
ChallengeArn
-
The Amazon Resource Name (ARN) of the challenge.