Skip to main content

revocation_status

Creates, updates, deletes, gets or lists a revocation_status resource.

Overview

Namerevocation_status
TypeResource
Idaws.signer_data.revocation_status

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
revoked_entitystringList of entity identifiers that have been revoked. Empty if no revocations found.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
get_revocation_statusselectsignatureTimestamp, platformId, profileVersionArn, jobArn, certificateHashes, regionRetrieves the revocation status for a signed artifact by checking if the signing profile, job, or certificate has been revoked.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
certificateHashesarrayList of certificate hashes to check for revocation.
jobArnstringThe ARN of the signing job that produced the signature.
platformIdstringThe platform identifier for the signing platform used.
profileVersionArnstringThe ARN of the signing profile version used to sign the artifact.
regionstringAWS region (default: us-east-1)
signatureTimestampstring (date-time)The timestamp when the artifact was signed, in ISO 8601 format.

SELECT examples

Retrieves the revocation status for a signed artifact by checking if the signing profile, job, or certificate has been revoked.

SELECT
revoked_entity
FROM aws.signer_data.revocation_status
WHERE signatureTimestamp = '{{ signatureTimestamp }}' -- required
AND platformId = '{{ platformId }}' -- required
AND profileVersionArn = '{{ profileVersionArn }}' -- required
AND jobArn = '{{ jobArn }}' -- required
AND certificateHashes = '{{ certificateHashes }}' -- required
AND region = '{{ region }}' -- required
;