@Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class ViewerCertificate extends Object implements Serializable, Cloneable
A complex type that specifies the following:
Whether you want viewers to use HTTP or HTTPS to request your objects.
If you want viewers to use HTTPS, whether you're using an alternate domain name, such as example.com, or
the CloudFront domain name for your distribution, such as d111111abcdef8.cloudfront.net.
If you're using an alternate domain name, whether AWS Certificate Manager (ACM) provided the certificate, or you purchased a certificate from a third-party certificate authority and imported it into ACM or uploaded it to the IAM certificate store.
Specify only one of the following values:
For more information, see Using Alternate Domain Names and HTTPS in the Amazon CloudFront Developer Guide.
| Constructor and Description |
|---|
ViewerCertificate() |
| Modifier and Type | Method and Description |
|---|---|
ViewerCertificate |
clone() |
boolean |
equals(Object obj) |
String |
getACMCertificateArn()
If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you must
choose the type of certificate that you want to use.
|
String |
getCertificate()
Deprecated.
|
String |
getCertificateSource()
Deprecated.
|
Boolean |
getCloudFrontDefaultCertificate()
If you're using the CloudFront domain name for your distribution, such as
d111111abcdef8.cloudfront.net, specify this value as true. |
String |
getIAMCertificateId()
If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you must
choose the type of certificate that you want to use.
|
String |
getMinimumProtocolVersion()
Specify the security policy that you want CloudFront to use for HTTPS connections.
|
String |
getSSLSupportMethod()
If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a method that
works for browsers and clients released after 2010, or one that works for all clients.
|
int |
hashCode() |
Boolean |
isCloudFrontDefaultCertificate()
If you're using the CloudFront domain name for your distribution, such as
d111111abcdef8.cloudfront.net, specify this value as true. |
void |
setACMCertificateArn(String aCMCertificateArn)
If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you must
choose the type of certificate that you want to use.
|
void |
setCertificate(String certificate)
Deprecated.
|
void |
setCertificateSource(CertificateSource certificateSource)
Deprecated.
|
void |
setCertificateSource(String certificateSource)
Deprecated.
|
void |
setCloudFrontDefaultCertificate(Boolean cloudFrontDefaultCertificate)
If you're using the CloudFront domain name for your distribution, such as
d111111abcdef8.cloudfront.net, specify this value as true. |
void |
setIAMCertificateId(String iAMCertificateId)
If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you must
choose the type of certificate that you want to use.
|
void |
setMinimumProtocolVersion(MinimumProtocolVersion minimumProtocolVersion)
Specify the security policy that you want CloudFront to use for HTTPS connections.
|
void |
setMinimumProtocolVersion(String minimumProtocolVersion)
Specify the security policy that you want CloudFront to use for HTTPS connections.
|
void |
setSSLSupportMethod(SSLSupportMethod sSLSupportMethod)
If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a method that
works for browsers and clients released after 2010, or one that works for all clients.
|
void |
setSSLSupportMethod(String sSLSupportMethod)
If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a method that
works for browsers and clients released after 2010, or one that works for all clients.
|
String |
toString()
Returns a string representation of this object.
|
ViewerCertificate |
withACMCertificateArn(String aCMCertificateArn)
If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you must
choose the type of certificate that you want to use.
|
ViewerCertificate |
withCertificate(String certificate)
Deprecated.
|
ViewerCertificate |
withCertificateSource(CertificateSource certificateSource)
Deprecated.
|
ViewerCertificate |
withCertificateSource(String certificateSource)
Deprecated.
|
ViewerCertificate |
withCloudFrontDefaultCertificate(Boolean cloudFrontDefaultCertificate)
If you're using the CloudFront domain name for your distribution, such as
d111111abcdef8.cloudfront.net, specify this value as true. |
ViewerCertificate |
withIAMCertificateId(String iAMCertificateId)
If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you must
choose the type of certificate that you want to use.
|
ViewerCertificate |
withMinimumProtocolVersion(MinimumProtocolVersion minimumProtocolVersion)
Specify the security policy that you want CloudFront to use for HTTPS connections.
|
ViewerCertificate |
withMinimumProtocolVersion(String minimumProtocolVersion)
Specify the security policy that you want CloudFront to use for HTTPS connections.
|
ViewerCertificate |
withSSLSupportMethod(SSLSupportMethod sSLSupportMethod)
If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a method that
works for browsers and clients released after 2010, or one that works for all clients.
|
ViewerCertificate |
withSSLSupportMethod(String sSLSupportMethod)
If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a method that
works for browsers and clients released after 2010, or one that works for all clients.
|
public void setCloudFrontDefaultCertificate(Boolean cloudFrontDefaultCertificate)
If you're using the CloudFront domain name for your distribution, such as
d111111abcdef8.cloudfront.net, specify this value as true.
cloudFrontDefaultCertificate - If you're using the CloudFront domain name for your distribution, such as
d111111abcdef8.cloudfront.net, specify this value as true.public Boolean getCloudFrontDefaultCertificate()
If you're using the CloudFront domain name for your distribution, such as
d111111abcdef8.cloudfront.net, specify this value as true.
d111111abcdef8.cloudfront.net, specify this value as true.public ViewerCertificate withCloudFrontDefaultCertificate(Boolean cloudFrontDefaultCertificate)
If you're using the CloudFront domain name for your distribution, such as
d111111abcdef8.cloudfront.net, specify this value as true.
cloudFrontDefaultCertificate - If you're using the CloudFront domain name for your distribution, such as
d111111abcdef8.cloudfront.net, specify this value as true.public Boolean isCloudFrontDefaultCertificate()
If you're using the CloudFront domain name for your distribution, such as
d111111abcdef8.cloudfront.net, specify this value as true.
d111111abcdef8.cloudfront.net, specify this value as true.public void setIAMCertificateId(String iAMCertificateId)
If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you must choose the type of certificate that you want to use. If you purchased your certificate from a third-party certificate authority and uploaded it to the IAM certificate store, specify the certificate ID that you want to use for this distribution.
If you specify a certificate ID, you must also specify an SSL support method (sni-only or
vip).
iAMCertificateId - If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you
must choose the type of certificate that you want to use. If you purchased your certificate from a
third-party certificate authority and uploaded it to the IAM certificate store, specify the certificate ID
that you want to use for this distribution.
If you specify a certificate ID, you must also specify an SSL support method (sni-only or
vip).
public String getIAMCertificateId()
If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you must choose the type of certificate that you want to use. If you purchased your certificate from a third-party certificate authority and uploaded it to the IAM certificate store, specify the certificate ID that you want to use for this distribution.
If you specify a certificate ID, you must also specify an SSL support method (sni-only or
vip).
If you specify a certificate ID, you must also specify an SSL support method (sni-only or
vip).
public ViewerCertificate withIAMCertificateId(String iAMCertificateId)
If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you must choose the type of certificate that you want to use. If you purchased your certificate from a third-party certificate authority and uploaded it to the IAM certificate store, specify the certificate ID that you want to use for this distribution.
If you specify a certificate ID, you must also specify an SSL support method (sni-only or
vip).
iAMCertificateId - If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you
must choose the type of certificate that you want to use. If you purchased your certificate from a
third-party certificate authority and uploaded it to the IAM certificate store, specify the certificate ID
that you want to use for this distribution.
If you specify a certificate ID, you must also specify an SSL support method (sni-only or
vip).
public void setACMCertificateArn(String aCMCertificateArn)
If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you must choose the type of certificate that you want to use. If ACM provided your certificate, specify the Amazon Resource Name (ARN) for the ACM certificate that you want to use for this distribution. CloudFront only supports ACM certificates in the US East (N. Virginia) Region (us-east-1).
If you specify an ACM certificate ARN, you must also specify an SSL support method (sni-only or
vip).
aCMCertificateArn - If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you
must choose the type of certificate that you want to use. If ACM provided your certificate, specify the
Amazon Resource Name (ARN) for the ACM certificate that you want to use for this distribution. CloudFront
only supports ACM certificates in the US East (N. Virginia) Region (us-east-1).
If you specify an ACM certificate ARN, you must also specify an SSL support method (sni-only
or vip).
public String getACMCertificateArn()
If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you must choose the type of certificate that you want to use. If ACM provided your certificate, specify the Amazon Resource Name (ARN) for the ACM certificate that you want to use for this distribution. CloudFront only supports ACM certificates in the US East (N. Virginia) Region (us-east-1).
If you specify an ACM certificate ARN, you must also specify an SSL support method (sni-only or
vip).
If you specify an ACM certificate ARN, you must also specify an SSL support method (sni-only
or vip).
public ViewerCertificate withACMCertificateArn(String aCMCertificateArn)
If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you must choose the type of certificate that you want to use. If ACM provided your certificate, specify the Amazon Resource Name (ARN) for the ACM certificate that you want to use for this distribution. CloudFront only supports ACM certificates in the US East (N. Virginia) Region (us-east-1).
If you specify an ACM certificate ARN, you must also specify an SSL support method (sni-only or
vip).
aCMCertificateArn - If you want viewers to use HTTPS to request your objects and you're using an alternate domain name, you
must choose the type of certificate that you want to use. If ACM provided your certificate, specify the
Amazon Resource Name (ARN) for the ACM certificate that you want to use for this distribution. CloudFront
only supports ACM certificates in the US East (N. Virginia) Region (us-east-1).
If you specify an ACM certificate ARN, you must also specify an SSL support method (sni-only
or vip).
public void setSSLSupportMethod(String sSLSupportMethod)
If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a method that works for browsers and clients released after 2010, or one that works for all clients.
sni-only: CloudFront can respond to HTTPS requests from viewers that support Server Name Indication
(SNI). All modern browsers support SNI, but there are a few that don't. For a current list of the browsers that
support SNI, see the Wikipedia entry Server Name
Indication. To learn about options to explore if you have viewers with browsers that don't include SNI
support, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
vip: CloudFront uses dedicated IP addresses for your content and can respond to HTTPS requests from
any viewer. However, there are additional monthly charges. For details, including specific pricing information,
see Custom SSL options for Amazon CloudFront
on the AWS marketing site.
Don't specify a value here if you specified CloudFrontDefaultCertificate as true.
For more information, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
sSLSupportMethod - If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a
method that works for browsers and clients released after 2010, or one that works for all clients.
sni-only: CloudFront can respond to HTTPS requests from viewers that support Server Name
Indication (SNI). All modern browsers support SNI, but there are a few that don't. For a current list of
the browsers that support SNI, see the Wikipedia entry Server Name Indication. To
learn about options to explore if you have viewers with browsers that don't include SNI support, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
vip: CloudFront uses dedicated IP addresses for your content and can respond to HTTPS
requests from any viewer. However, there are additional monthly charges. For details, including specific
pricing information, see Custom SSL options
for Amazon CloudFront on the AWS marketing site.
Don't specify a value here if you specified CloudFrontDefaultCertificate as true
.
For more information, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
SSLSupportMethodpublic String getSSLSupportMethod()
If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a method that works for browsers and clients released after 2010, or one that works for all clients.
sni-only: CloudFront can respond to HTTPS requests from viewers that support Server Name Indication
(SNI). All modern browsers support SNI, but there are a few that don't. For a current list of the browsers that
support SNI, see the Wikipedia entry Server Name
Indication. To learn about options to explore if you have viewers with browsers that don't include SNI
support, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
vip: CloudFront uses dedicated IP addresses for your content and can respond to HTTPS requests from
any viewer. However, there are additional monthly charges. For details, including specific pricing information,
see Custom SSL options for Amazon CloudFront
on the AWS marketing site.
Don't specify a value here if you specified CloudFrontDefaultCertificate as true.
For more information, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
sni-only: CloudFront can respond to HTTPS requests from viewers that support Server Name
Indication (SNI). All modern browsers support SNI, but there are a few that don't. For a current list of
the browsers that support SNI, see the Wikipedia entry Server Name Indication. To
learn about options to explore if you have viewers with browsers that don't include SNI support, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
vip: CloudFront uses dedicated IP addresses for your content and can respond to HTTPS
requests from any viewer. However, there are additional monthly charges. For details, including specific
pricing information, see Custom SSL
options for Amazon CloudFront on the AWS marketing site.
Don't specify a value here if you specified CloudFrontDefaultCertificate as
true.
For more information, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
SSLSupportMethodpublic ViewerCertificate withSSLSupportMethod(String sSLSupportMethod)
If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a method that works for browsers and clients released after 2010, or one that works for all clients.
sni-only: CloudFront can respond to HTTPS requests from viewers that support Server Name Indication
(SNI). All modern browsers support SNI, but there are a few that don't. For a current list of the browsers that
support SNI, see the Wikipedia entry Server Name
Indication. To learn about options to explore if you have viewers with browsers that don't include SNI
support, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
vip: CloudFront uses dedicated IP addresses for your content and can respond to HTTPS requests from
any viewer. However, there are additional monthly charges. For details, including specific pricing information,
see Custom SSL options for Amazon CloudFront
on the AWS marketing site.
Don't specify a value here if you specified CloudFrontDefaultCertificate as true.
For more information, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
sSLSupportMethod - If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a
method that works for browsers and clients released after 2010, or one that works for all clients.
sni-only: CloudFront can respond to HTTPS requests from viewers that support Server Name
Indication (SNI). All modern browsers support SNI, but there are a few that don't. For a current list of
the browsers that support SNI, see the Wikipedia entry Server Name Indication. To
learn about options to explore if you have viewers with browsers that don't include SNI support, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
vip: CloudFront uses dedicated IP addresses for your content and can respond to HTTPS
requests from any viewer. However, there are additional monthly charges. For details, including specific
pricing information, see Custom SSL options
for Amazon CloudFront on the AWS marketing site.
Don't specify a value here if you specified CloudFrontDefaultCertificate as true
.
For more information, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
SSLSupportMethodpublic void setSSLSupportMethod(SSLSupportMethod sSLSupportMethod)
If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a method that works for browsers and clients released after 2010, or one that works for all clients.
sni-only: CloudFront can respond to HTTPS requests from viewers that support Server Name Indication
(SNI). All modern browsers support SNI, but there are a few that don't. For a current list of the browsers that
support SNI, see the Wikipedia entry Server Name
Indication. To learn about options to explore if you have viewers with browsers that don't include SNI
support, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
vip: CloudFront uses dedicated IP addresses for your content and can respond to HTTPS requests from
any viewer. However, there are additional monthly charges. For details, including specific pricing information,
see Custom SSL options for Amazon CloudFront
on the AWS marketing site.
Don't specify a value here if you specified CloudFrontDefaultCertificate as true.
For more information, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
sSLSupportMethod - If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a
method that works for browsers and clients released after 2010, or one that works for all clients.
sni-only: CloudFront can respond to HTTPS requests from viewers that support Server Name
Indication (SNI). All modern browsers support SNI, but there are a few that don't. For a current list of
the browsers that support SNI, see the Wikipedia entry Server Name Indication. To
learn about options to explore if you have viewers with browsers that don't include SNI support, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
vip: CloudFront uses dedicated IP addresses for your content and can respond to HTTPS
requests from any viewer. However, there are additional monthly charges. For details, including specific
pricing information, see Custom SSL options
for Amazon CloudFront on the AWS marketing site.
Don't specify a value here if you specified CloudFrontDefaultCertificate as true
.
For more information, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
SSLSupportMethodpublic ViewerCertificate withSSLSupportMethod(SSLSupportMethod sSLSupportMethod)
If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a method that works for browsers and clients released after 2010, or one that works for all clients.
sni-only: CloudFront can respond to HTTPS requests from viewers that support Server Name Indication
(SNI). All modern browsers support SNI, but there are a few that don't. For a current list of the browsers that
support SNI, see the Wikipedia entry Server Name
Indication. To learn about options to explore if you have viewers with browsers that don't include SNI
support, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
vip: CloudFront uses dedicated IP addresses for your content and can respond to HTTPS requests from
any viewer. However, there are additional monthly charges. For details, including specific pricing information,
see Custom SSL options for Amazon CloudFront
on the AWS marketing site.
Don't specify a value here if you specified CloudFrontDefaultCertificate as true.
For more information, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
sSLSupportMethod - If you specify a value for ACMCertificateArn or for IAMCertificateId, you must also specify how you want CloudFront to serve HTTPS requests: using a
method that works for browsers and clients released after 2010, or one that works for all clients.
sni-only: CloudFront can respond to HTTPS requests from viewers that support Server Name
Indication (SNI). All modern browsers support SNI, but there are a few that don't. For a current list of
the browsers that support SNI, see the Wikipedia entry Server Name Indication. To
learn about options to explore if you have viewers with browsers that don't include SNI support, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
vip: CloudFront uses dedicated IP addresses for your content and can respond to HTTPS
requests from any viewer. However, there are additional monthly charges. For details, including specific
pricing information, see Custom SSL options
for Amazon CloudFront on the AWS marketing site.
Don't specify a value here if you specified CloudFrontDefaultCertificate as true
.
For more information, see Choosing How CloudFront Serves HTTPS Requests in the Amazon CloudFront Developer Guide.
SSLSupportMethodpublic void setMinimumProtocolVersion(String minimumProtocolVersion)
Specify the security policy that you want CloudFront to use for HTTPS connections. A security policy determines two settings:
The minimum SSL/TLS protocol that CloudFront uses to communicate with viewers.
The cipher that CloudFront uses to encrypt the content that it returns to viewers.
On the CloudFront console, this setting is called Security Policy.
We recommend that you specify TLSv1.1_2016 unless your viewers are using browsers or devices that do
not support TLSv1.1 or later.
When both of the following are true, you must specify TLSv1 or later for the security policy:
You're using a custom certificate; that is, you specified a value for ACMCertificateArn or for
IAMCertificateId.
You're using SNI; that is, you specified sni-only for SSLSupportMethod.
If you specify true for CloudFrontDefaultCertificate, CloudFront automatically sets the
security policy to TLSv1 regardless of the value that you specify here.
For information about the relationship between the security policy that you choose and the protocols and ciphers that CloudFront uses to communicate with viewers, see Supported SSL/TLS Protocols and Ciphers for Communication Between Viewers and CloudFront in the Amazon CloudFront Developer Guide.
minimumProtocolVersion - Specify the security policy that you want CloudFront to use for HTTPS connections. A security policy
determines two settings:
The minimum SSL/TLS protocol that CloudFront uses to communicate with viewers.
The cipher that CloudFront uses to encrypt the content that it returns to viewers.
On the CloudFront console, this setting is called Security Policy.
We recommend that you specify TLSv1.1_2016 unless your viewers are using browsers or devices
that do not support TLSv1.1 or later.
When both of the following are true, you must specify TLSv1 or later for the security policy:
You're using a custom certificate; that is, you specified a value for ACMCertificateArn or
for IAMCertificateId.
You're using SNI; that is, you specified sni-only for SSLSupportMethod.
If you specify true for CloudFrontDefaultCertificate, CloudFront automatically
sets the security policy to TLSv1 regardless of the value that you specify here.
For information about the relationship between the security policy that you choose and the protocols and ciphers that CloudFront uses to communicate with viewers, see Supported SSL/TLS Protocols and Ciphers for Communication Between Viewers and CloudFront in the Amazon CloudFront Developer Guide.
MinimumProtocolVersionpublic String getMinimumProtocolVersion()
Specify the security policy that you want CloudFront to use for HTTPS connections. A security policy determines two settings:
The minimum SSL/TLS protocol that CloudFront uses to communicate with viewers.
The cipher that CloudFront uses to encrypt the content that it returns to viewers.
On the CloudFront console, this setting is called Security Policy.
We recommend that you specify TLSv1.1_2016 unless your viewers are using browsers or devices that do
not support TLSv1.1 or later.
When both of the following are true, you must specify TLSv1 or later for the security policy:
You're using a custom certificate; that is, you specified a value for ACMCertificateArn or for
IAMCertificateId.
You're using SNI; that is, you specified sni-only for SSLSupportMethod.
If you specify true for CloudFrontDefaultCertificate, CloudFront automatically sets the
security policy to TLSv1 regardless of the value that you specify here.
For information about the relationship between the security policy that you choose and the protocols and ciphers that CloudFront uses to communicate with viewers, see Supported SSL/TLS Protocols and Ciphers for Communication Between Viewers and CloudFront in the Amazon CloudFront Developer Guide.
The minimum SSL/TLS protocol that CloudFront uses to communicate with viewers.
The cipher that CloudFront uses to encrypt the content that it returns to viewers.
On the CloudFront console, this setting is called Security Policy.
We recommend that you specify TLSv1.1_2016 unless your viewers are using browsers or devices
that do not support TLSv1.1 or later.
When both of the following are true, you must specify TLSv1 or later for the security
policy:
You're using a custom certificate; that is, you specified a value for ACMCertificateArn or
for IAMCertificateId.
You're using SNI; that is, you specified sni-only for SSLSupportMethod.
If you specify true for CloudFrontDefaultCertificate, CloudFront automatically
sets the security policy to TLSv1 regardless of the value that you specify here.
For information about the relationship between the security policy that you choose and the protocols and ciphers that CloudFront uses to communicate with viewers, see Supported SSL/TLS Protocols and Ciphers for Communication Between Viewers and CloudFront in the Amazon CloudFront Developer Guide.
MinimumProtocolVersionpublic ViewerCertificate withMinimumProtocolVersion(String minimumProtocolVersion)
Specify the security policy that you want CloudFront to use for HTTPS connections. A security policy determines two settings:
The minimum SSL/TLS protocol that CloudFront uses to communicate with viewers.
The cipher that CloudFront uses to encrypt the content that it returns to viewers.
On the CloudFront console, this setting is called Security Policy.
We recommend that you specify TLSv1.1_2016 unless your viewers are using browsers or devices that do
not support TLSv1.1 or later.
When both of the following are true, you must specify TLSv1 or later for the security policy:
You're using a custom certificate; that is, you specified a value for ACMCertificateArn or for
IAMCertificateId.
You're using SNI; that is, you specified sni-only for SSLSupportMethod.
If you specify true for CloudFrontDefaultCertificate, CloudFront automatically sets the
security policy to TLSv1 regardless of the value that you specify here.
For information about the relationship between the security policy that you choose and the protocols and ciphers that CloudFront uses to communicate with viewers, see Supported SSL/TLS Protocols and Ciphers for Communication Between Viewers and CloudFront in the Amazon CloudFront Developer Guide.
minimumProtocolVersion - Specify the security policy that you want CloudFront to use for HTTPS connections. A security policy
determines two settings:
The minimum SSL/TLS protocol that CloudFront uses to communicate with viewers.
The cipher that CloudFront uses to encrypt the content that it returns to viewers.
On the CloudFront console, this setting is called Security Policy.
We recommend that you specify TLSv1.1_2016 unless your viewers are using browsers or devices
that do not support TLSv1.1 or later.
When both of the following are true, you must specify TLSv1 or later for the security policy:
You're using a custom certificate; that is, you specified a value for ACMCertificateArn or
for IAMCertificateId.
You're using SNI; that is, you specified sni-only for SSLSupportMethod.
If you specify true for CloudFrontDefaultCertificate, CloudFront automatically
sets the security policy to TLSv1 regardless of the value that you specify here.
For information about the relationship between the security policy that you choose and the protocols and ciphers that CloudFront uses to communicate with viewers, see Supported SSL/TLS Protocols and Ciphers for Communication Between Viewers and CloudFront in the Amazon CloudFront Developer Guide.
MinimumProtocolVersionpublic void setMinimumProtocolVersion(MinimumProtocolVersion minimumProtocolVersion)
Specify the security policy that you want CloudFront to use for HTTPS connections. A security policy determines two settings:
The minimum SSL/TLS protocol that CloudFront uses to communicate with viewers.
The cipher that CloudFront uses to encrypt the content that it returns to viewers.
On the CloudFront console, this setting is called Security Policy.
We recommend that you specify TLSv1.1_2016 unless your viewers are using browsers or devices that do
not support TLSv1.1 or later.
When both of the following are true, you must specify TLSv1 or later for the security policy:
You're using a custom certificate; that is, you specified a value for ACMCertificateArn or for
IAMCertificateId.
You're using SNI; that is, you specified sni-only for SSLSupportMethod.
If you specify true for CloudFrontDefaultCertificate, CloudFront automatically sets the
security policy to TLSv1 regardless of the value that you specify here.
For information about the relationship between the security policy that you choose and the protocols and ciphers that CloudFront uses to communicate with viewers, see Supported SSL/TLS Protocols and Ciphers for Communication Between Viewers and CloudFront in the Amazon CloudFront Developer Guide.
minimumProtocolVersion - Specify the security policy that you want CloudFront to use for HTTPS connections. A security policy
determines two settings:
The minimum SSL/TLS protocol that CloudFront uses to communicate with viewers.
The cipher that CloudFront uses to encrypt the content that it returns to viewers.
On the CloudFront console, this setting is called Security Policy.
We recommend that you specify TLSv1.1_2016 unless your viewers are using browsers or devices
that do not support TLSv1.1 or later.
When both of the following are true, you must specify TLSv1 or later for the security policy:
You're using a custom certificate; that is, you specified a value for ACMCertificateArn or
for IAMCertificateId.
You're using SNI; that is, you specified sni-only for SSLSupportMethod.
If you specify true for CloudFrontDefaultCertificate, CloudFront automatically
sets the security policy to TLSv1 regardless of the value that you specify here.
For information about the relationship between the security policy that you choose and the protocols and ciphers that CloudFront uses to communicate with viewers, see Supported SSL/TLS Protocols and Ciphers for Communication Between Viewers and CloudFront in the Amazon CloudFront Developer Guide.
MinimumProtocolVersionpublic ViewerCertificate withMinimumProtocolVersion(MinimumProtocolVersion minimumProtocolVersion)
Specify the security policy that you want CloudFront to use for HTTPS connections. A security policy determines two settings:
The minimum SSL/TLS protocol that CloudFront uses to communicate with viewers.
The cipher that CloudFront uses to encrypt the content that it returns to viewers.
On the CloudFront console, this setting is called Security Policy.
We recommend that you specify TLSv1.1_2016 unless your viewers are using browsers or devices that do
not support TLSv1.1 or later.
When both of the following are true, you must specify TLSv1 or later for the security policy:
You're using a custom certificate; that is, you specified a value for ACMCertificateArn or for
IAMCertificateId.
You're using SNI; that is, you specified sni-only for SSLSupportMethod.
If you specify true for CloudFrontDefaultCertificate, CloudFront automatically sets the
security policy to TLSv1 regardless of the value that you specify here.
For information about the relationship between the security policy that you choose and the protocols and ciphers that CloudFront uses to communicate with viewers, see Supported SSL/TLS Protocols and Ciphers for Communication Between Viewers and CloudFront in the Amazon CloudFront Developer Guide.
minimumProtocolVersion - Specify the security policy that you want CloudFront to use for HTTPS connections. A security policy
determines two settings:
The minimum SSL/TLS protocol that CloudFront uses to communicate with viewers.
The cipher that CloudFront uses to encrypt the content that it returns to viewers.
On the CloudFront console, this setting is called Security Policy.
We recommend that you specify TLSv1.1_2016 unless your viewers are using browsers or devices
that do not support TLSv1.1 or later.
When both of the following are true, you must specify TLSv1 or later for the security policy:
You're using a custom certificate; that is, you specified a value for ACMCertificateArn or
for IAMCertificateId.
You're using SNI; that is, you specified sni-only for SSLSupportMethod.
If you specify true for CloudFrontDefaultCertificate, CloudFront automatically
sets the security policy to TLSv1 regardless of the value that you specify here.
For information about the relationship between the security policy that you choose and the protocols and ciphers that CloudFront uses to communicate with viewers, see Supported SSL/TLS Protocols and Ciphers for Communication Between Viewers and CloudFront in the Amazon CloudFront Developer Guide.
MinimumProtocolVersion@Deprecated public void setCertificate(String certificate)
This field is no longer used. Use one of the following fields instead:
certificate - This field is no longer used. Use one of the following fields instead:
@Deprecated public String getCertificate()
This field is no longer used. Use one of the following fields instead:
@Deprecated public ViewerCertificate withCertificate(String certificate)
This field is no longer used. Use one of the following fields instead:
certificate - This field is no longer used. Use one of the following fields instead:
@Deprecated public void setCertificateSource(String certificateSource)
This field is no longer used. Use one of the following fields instead:
certificateSource - This field is no longer used. Use one of the following fields instead:
CertificateSource@Deprecated public String getCertificateSource()
This field is no longer used. Use one of the following fields instead:
CertificateSource@Deprecated public ViewerCertificate withCertificateSource(String certificateSource)
This field is no longer used. Use one of the following fields instead:
certificateSource - This field is no longer used. Use one of the following fields instead:
CertificateSource@Deprecated public void setCertificateSource(CertificateSource certificateSource)
This field is no longer used. Use one of the following fields instead:
certificateSource - This field is no longer used. Use one of the following fields instead:
CertificateSource@Deprecated public ViewerCertificate withCertificateSource(CertificateSource certificateSource)
This field is no longer used. Use one of the following fields instead:
certificateSource - This field is no longer used. Use one of the following fields instead:
CertificateSourcepublic String toString()
toString in class ObjectObject.toString()public ViewerCertificate clone()
Copyright © 2019. All rights reserved.