Skip to main content

public_key_certificates

Creates, updates, deletes, gets or lists a public_key_certificates resource.

Overview

Namepublic_key_certificates
TypeResource
Idaws.payment_cryptography.public_key_certificates

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
key_certificatestringThe public key component of the asymmetric key pair in a certificate PEM format (base64 encoded). It is signed by the root certificate authority (CA). The certificate is valid for 90 days from the time it is issued. The service returns a cached certificate if one exists with at least 30 days of remaining validity. Otherwise, a new 90-day certificate is issued. (pattern: <code>[^&#91;;&#93;<>]+</code>)
key_certificate_chainstringThe root certificate authority (CA) that signed the public key certificate in PEM format (base64 encoded) of the asymmetric key pair. (pattern: <code>[^&#91;;&#93;<>]+</code>)

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
get_public_key_certificateselectregionGets the public key certificate of the asymmetric key pair that exists within Amazon Web Services Payment Cryptography. Unlike the private key of an asymmetric key, which never leaves Amazon Web Services Payment Cryptography unencrypted, callers with GetPublicKeyCertificate permission can download the public key certificate of the asymmetric key. You can share the public key certificate to allow others to encrypt messages and verify signatures outside of Amazon Web Services Payment Cryptography Cross-account use: This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see Resource-based policies.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
regionstringAWS region (default: us-east-1)

SELECT examples

Gets the public key certificate of the asymmetric key pair that exists within Amazon Web Services Payment Cryptography. Unlike the private key of an asymmetric key, which never leaves Amazon Web Services Payment Cryptography unencrypted, callers with GetPublicKeyCertificate permission can download the public key certificate of the asymmetric key. You can share the public key certificate to allow others to encrypt messages and verify signatures outside of Amazon Web Services Payment Cryptography Cross-account use: This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see Resource-based policies.

SELECT
key_certificate,
key_certificate_chain
FROM aws.payment_cryptography.public_key_certificates
WHERE region = '{{ region }}' -- required
;