feat(certificatemanager): Allow opting out of transparency logging#21686
Conversation
|
|
| readonly validation?: CertificateValidation; | ||
|
|
||
| /** | ||
| * Enable or disable transparency logging for this certificate |
There was a problem hiding this comment.
Can you add something here about how enabling/disabling this works? For example I think you can't change it after creation?
There was a problem hiding this comment.
Well you technically can change it in the api, however it will not have an effect. When a certificate is registered/logged it cannot be undone.
| * | ||
| * @default TransparencyLoggingPreference.ENABLED | ||
| */ | ||
| readonly certificateTransparencyLoggingPreference?: TransparencyLoggingPreference; |
There was a problem hiding this comment.
| readonly certificateTransparencyLoggingPreference?: TransparencyLoggingPreference; | |
| readonly transparencyLoggingEnabled?: boolean; |
Can we shorten the name to just transparencyLoggingEnabled? Also, since it is just enabled/disabled we can make it a boolean.
|
exempting integration test since integration tests for certificatemanager require you to have a valid public domain (hence the lack of existing integration tests). |
67aaa4d to
515c0cb
Compare
Pull request has been modified.
AWS CodeBuild CI Report
Powered by github-codebuild-logs, available on the AWS Serverless Application Repository |
|
Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork). |
Certificates created with AWS Certificate Manager are recorded in a certificate transparency log. ACM however allows you to opt of out of transparency logging. This feature enables certificates created in ACM through CDK to opt out of transparency logging.
All Submissions:
Adding new Unconventional Dependencies:
New Features
yarn integto deploy the infrastructure and generate the snapshot (i.e.yarn integwithout--dry-run)?By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license