aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

Add Key Algorithm option to ACM Certificate

Open
#1,401 3 comments 10 reactions 0 assignees View on GitHub
Coverage
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::CertificateManager::Certificate

### Resource name

_No response_

### Description

I am requesting `KeyAlgorithm` be added to AWS::CertificateManager::Certificate.

After reading this blog post https://aws.amazon.com/about-aws/whats-new/2022/11/aws-certificate-manager-elliptic-curve-digital-signature-algorithm-tls-certificates/

From the AWS ACM Web Console, I am able to successfully create a Certificate with `EC_secp384r1` KeyAlgorithm and use the certificate successfully.

I then attempted to create a `EC_secp384r1` certificate via CDK but was not able to set the KeyAlgorithm and noticed it not available with [cloudformation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-certificatemanager-certificate.html).

I am not sure if I need to submit request as the blog post says "CloudFormation support will be coming soon" at the end, but I did not find a feature request on the roadmap, so wasn't sure if it was being track here :)

### Other Details

My team has created an ACM Private Certificate Authority for issuing certs via CDK. We set it to be Elliptic curve based but once we started to try to issue certificates with it, we noticed we could not set KeyAlgorithm with cloudformation and it defaults to RSA2048 which doesn't match our PCA KeyAlgorithm.

Contributor guide

Open the contributing guide

Research direction

Start with the AWS::CertificateManager::Certificate resource named in the issue and review the linked CloudFormation resource documentation and ACM announcement. Confirm how KeyAlgorithm, including EC_secp384r1, should be exposed and validated; done means CloudFormation can create the requested certificate configuration for an ACM private certificate authority.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.