RevokeCertificate

Source: src/AWS/ACMPCA/RevokeCertificate.ts

Runtime binding for acm-pca:RevokeCertificate.

Bind a CertificateAuthority inside a function runtime to revoke certificates the CA issued (e.g. on credential compromise). Revoked certificates appear in the CA’s CRL/OCSP responses when revocation is configured. The serial number is the hex serial from the issued certificate. Provide ACMPCA.RevokeCertificateHttp on the Function effect to implement the binding.

Revoking Certificates

// init
const revokeCertificate = yield* ACMPCA.RevokeCertificate(ca);

// runtime
yield* revokeCertificate({
  CertificateSerial: serialHex,
  RevocationReason: "KEY_COMPROMISE",
});