Skip to content

EnclaveCertificateIamRoleAssociation ​

The EnclaveCertificateIamRoleAssociation resource allows you to associate an IAM role with an AWS EC2 Enclave Certificate, enabling secure communications for EC2 instances. For more details, refer to the AWS EC2 EnclaveCertificateIamRoleAssociations documentation.

Minimal Example ​

Create a basic Enclave Certificate IAM Role Association with the required properties.

ts
import AWS from "alchemy/aws/control";

const enclaveCertificateAssociation = await AWS.EC2.EnclaveCertificateIamRoleAssociation("myEnclaveAssociation", {
  RoleArn: "arn:aws:iam::123456789012:role/MyEC2Role",
  CertificateArn: "arn:aws:ec2:us-west-2:123456789012:enclave-certificate/my-certificate",
  adopt: true // Optional: Adopt existing resource if it already exists
});

Advanced Configuration ​

This example demonstrates how to create an Enclave Certificate IAM Role Association with additional properties for more control over the resource.

ts
const advancedEnclaveAssociation = await AWS.EC2.EnclaveCertificateIamRoleAssociation("advancedEnclaveAssociation", {
  RoleArn: "arn:aws:iam::123456789012:role/MyAdvancedEC2Role",
  CertificateArn: "arn:aws:ec2:us-west-2:123456789012:enclave-certificate/my-advanced-certificate",
  adopt: true // Optional: Adopt existing resource if it already exists
});

Use Case: Updating an Existing Association ​

In this example, we demonstrate how to update an existing Enclave Certificate IAM Role Association by specifying the same properties.

ts
const updatedEnclaveAssociation = await AWS.EC2.EnclaveCertificateIamRoleAssociation("myEnclaveAssociation", {
  RoleArn: "arn:aws:iam::123456789012:role/MyUpdatedEC2Role",
  CertificateArn: "arn:aws:ec2:us-west-2:123456789012:enclave-certificate/my-updated-certificate",
  adopt: false // Optional: Do not adopt existing resource, will fail if it exists
});