Class: AWSCDK::AppMesh::MutualTLSValidation

Inherits:
Jsii::Struct
  • Object
show all
Defined in:
app_mesh/mutual_tls_validation.rb

Overview

Represents the properties needed to define TLS Validation context that is supported for mutual TLS authentication.

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(trust:, subject_alternative_names: nil) ⇒ MutualTLSValidation

Returns a new instance of MutualTLSValidation.

Parameters:



9
10
11
12
13
14
# File 'app_mesh/mutual_tls_validation.rb', line 9

def initialize(trust:, subject_alternative_names: nil)
  @trust = trust
  Jsii::Type.check_type(@trust, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5hd3NfYXBwbWVzaC5NdXR1YWxUbHNWYWxpZGF0aW9uVHJ1c3QifQ==")), "trust")
  @subject_alternative_names = subject_alternative_names
  Jsii::Type.check_type(@subject_alternative_names, JSON.parse(Base64.strict_decode64("eyJmcW4iOiJhd3MtY2RrLWxpYi5hd3NfYXBwbWVzaC5TdWJqZWN0QWx0ZXJuYXRpdmVOYW1lcyJ9")), "subjectAlternativeNames") unless @subject_alternative_names.nil?
end

Instance Attribute Details

#subject_alternative_namesAWSCDK::AppMesh::SubjectAlternativeNames? (readonly)

Note:

Default: - If you don't specify SANs on the terminating mesh endpoint, the Envoy proxy for that node doesn't verify the SAN on a peer client certificate. If you don't specify SANs on the originating mesh endpoint, the SAN on the certificate provided by the terminating endpoint must match the mesh endpoint service discovery configuration.

Represents the subject alternative names (SANs) secured by the certificate.

SANs must be in the FQDN or URI format.



26
27
28
# File 'app_mesh/mutual_tls_validation.rb', line 26

def subject_alternative_names
  @subject_alternative_names
end

#trustAWSCDK::AppMesh::MutualTLSValidationTrust (readonly)

Reference to where to retrieve the trust chain.



19
20
21
# File 'app_mesh/mutual_tls_validation.rb', line 19

def trust
  @trust
end

Class Method Details

.jsii_propertiesObject



28
29
30
31
32
33
# File 'app_mesh/mutual_tls_validation.rb', line 28

def self.jsii_properties
  {
    :trust => "trust",
    :subject_alternative_names => "subjectAlternativeNames",
  }
end

Instance Method Details

#to_jsiiObject



35
36
37
38
39
40
41
42
# File 'app_mesh/mutual_tls_validation.rb', line 35

def to_jsii
  result = {}
  result.merge!({
    "trust" => @trust,
    "subjectAlternativeNames" => @subject_alternative_names,
  })
  result.compact
end