lulo ACM Get Certificate

lulo ACM Get Certificate gets the certificate ARN from ACM for a specific domain name.

lulo ACM Get Certificate is a lulo plugin

Installation

npm install lulo-plugin-acm-get-certificate --save

Usage

Custom Properties

• DomainName: The Domain name you want to match. Note that this must be the primary domain name of the certificate.
• Region: Override the AWS Region from where to list certificates. Useful when getting CloudFront certificates which have to be issued in us-east-1. Optional. Default is where the CustomResource is deployed.
• ConflictResolutionStrategy: If more than one matching certificate is found, decide which to return. FIRST or NEWEST. Default is FIRST. When using NEWESTit will compare both CreatedAt and ImportedAt for each certificate.

SDK Properties

See the SDK documentation for applicable parameters.

• CertificateStatuses: If not specified in the CustomResource it will default to ['ISSUED'].

Return Values

When the logical ID of this resource is provided to the Ref intrinsic function, Ref returns the ARN of the certificate.

{ "Ref": "AcmCertificateArn" }

Note: If no matching certificate is found, an error is returned.

Required IAM Permissions

The Custom Resource Lambda requires the following permission statement for this plugin to work:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "acm:ListCertificates"
        "acm:DescribeCertificate"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}

License

The MIT License (MIT)

Change Log

Change Log