HttpApiDomainConfiguration
Configures a custom domain for an API.
Syntax
To declare this entity in your Amazon Serverless Application Model (Amazon SAM) template, use the following syntax.
YAML
BasePath:ListCertificateArn:StringDomainName:StringEndpointConfiguration:StringMutualTlsAuthentication:MutualTlsAuthenticationOwnershipVerificationCertificateArn:StringRoute53:Route53ConfigurationSecurityPolicy:String
Properties
-
BasePath -
A list of the basepaths to configure with the Amazon API Gateway domain name.
Type: List
Required: No
Default: /
Amazon CloudFormation compatibility: This property is similar to the
ApiMappingKeyproperty of anAWS::ApiGatewayV2::ApiMappingresource. Amazon SAM creates multipleAWS::ApiGatewayV2::ApiMappingresources, one per value specified in this property. -
CertificateArn -
The Amazon Resource Name (ARN) of an Amazon managed certificate for this domain name's endpoint. Amazon Certificate Manager is the only supported source.
Type: String
Required: Yes
Amazon CloudFormation compatibility: This property is passed directly to the
CertificateArnproperty of anAWS::ApiGateway2::DomainName DomainNameConfigurationresource. -
DomainName -
The custom domain name for your API Gateway API. Uppercase letters are not supported.
Amazon SAM generates an
AWS::ApiGatewayV2::DomainNameresource when this property is set. For information about this scenario, see DomainName property is specified. For information about generated Amazon CloudFormation resources, see Generated Amazon CloudFormation resources for Amazon SAM.Type: String
Required: Yes
Amazon CloudFormation compatibility: This property is passed directly to the
DomainNameproperty of anAWS::ApiGateway2::DomainNameresource. -
EndpointConfiguration -
Defines the type of API Gateway endpoint to map to the custom domain. The value of this property determines how the
CertificateArnproperty is mapped in Amazon CloudFormation.The only valid value for HTTP APIs is
REGIONAL.Type: String
Required: No
Default:
REGIONALAmazon CloudFormation compatibility: This property is unique to Amazon SAM and doesn't have an Amazon CloudFormation equivalent.
-
MutualTlsAuthentication -
The mutual transport layer security (TLS) authentication configuration for a custom domain name.
Type: MutualTlsAuthentication
Required: No
Amazon CloudFormation compatibility: This property is passed directly to the
MutualTlsAuthenticationproperty of anAWS::ApiGatewayV2::DomainNameresource. -
OwnershipVerificationCertificateArn -
The ARN of the public certificate issued by ACM to validate ownership of your custom domain. Required only when you configure mutual TLS and you specify an ACM imported or private CA certificate ARN for the
CertificateArn.Type: String
Required: No
Amazon CloudFormation compatibility: This property is passed directly to the
OwnershipVerificationCertificateArnproperty of theAWS::ApiGatewayV2::DomainNameDomainNameConfigurationdata type. -
Route53 -
Defines an Amazon Route 53 configuration.
Type: Route53Configuration
Required: No
Amazon CloudFormation compatibility: This property is unique to Amazon SAM and doesn't have an Amazon CloudFormation equivalent.
-
SecurityPolicy -
The TLS version of the security policy for this domain name.
The only valid value for HTTP APIs is
TLS_1_2.Type: String
Required: No
Amazon CloudFormation compatibility: This property is passed directly to the
SecurityPolicyproperty of theAWS::ApiGatewayV2::DomainNameDomainNameConfigurationdata type.
Examples
DomainName
DomainName example
YAML
Domain: DomainName: www.example.com CertificateArn: arn-example EndpointConfiguration: REGIONAL Route53: HostedZoneId: Z1PA6795UKMFR9 BasePath: - foo - bar