aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
Add Key Algorithm option to ACM Certificate
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
### Name of the resource
AWS::CertificateManager::Certificate
### Resource name
_No response_
### Description
I am requesting `KeyAlgorithm` be added to AWS::CertificateManager::Certificate.
After reading this blog post https://aws.amazon.com/about-aws/whats-new/2022/11/aws-certificate-manager-elliptic-curve-digital-signature-algorithm-tls-certificates/
From the AWS ACM Web Console, I am able to successfully create a Certificate with `EC_secp384r1` KeyAlgorithm and use the certificate successfully.
I then attempted to create a `EC_secp384r1` certificate via CDK but was not able to set the KeyAlgorithm and noticed it not available with [cloudformation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-certificatemanager-certificate.html).
I am not sure if I need to submit request as the blog post says "CloudFormation support will be coming soon" at the end, but I did not find a feature request on the roadmap, so wasn't sure if it was being track here :)
### Other Details
My team has created an ACM Private Certificate Authority for issuing certs via CDK. We set it to be Elliptic curve based but once we started to try to issue certificates with it, we noticed we could not set KeyAlgorithm with cloudformation and it defaults to RSA2048 which doesn't match our PCA KeyAlgorithm.
Contributor guide
Research direction
Start with the AWS::CertificateManager::Certificate resource named in the issue and review the linked CloudFormation resource documentation and ACM announcement. Confirm how KeyAlgorithm, including EC_secp384r1, should be exposed and validated; done means CloudFormation can create the requested certificate configuration for an ACM private certificate authority.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100