AWS::RolesAnywhere::TrustAnchor

Creates a trust anchor to establish trust between IAM Roles Anywhere and your certificate authority (CA). You can define a trust anchor by uploading a CA certificate. Your Amazon workloads can authenticate with the trust anchor using certificates issued by the CA in exchange for temporary Amazon credentials.

Required permissions: rolesanywhere:CreateTrustAnchor.

Syntax

To declare this entity in your Amazon CloudFormation template, use the following syntax:

{
  "Type" : "AWS::RolesAnywhere::TrustAnchor",
  "Properties" : {
      "Enabled" : Boolean,
      "Name" : String,
      "Source" : Source,
      "Tags" : [ Tag, ... ]
    }
}

Type: AWS::RolesAnywhere::TrustAnchor
Properties: 
  Enabled: Boolean
  Name: String
  Source: 
    Source
  Tags: 
    - Tag

Properties

Return values

Ref

When you pass the logical ID of this resource to the intrinsic Reffunction, Refreturns TrustAnchorId.

Fn::GetAtt

The Fn::GetAttintrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the Fn::GetAttintrinsic function, see Fn::GetAtt.