Crl

Source: src/AWS/RolesAnywhere/Crl.ts

An IAM Roles Anywhere certificate revocation list (CRL). A CRL is a PEM-encoded list of certificates revoked by the trust anchor’s certificate authority; IAM Roles Anywhere refuses to vend credentials for revoked certificates while the CRL is enabled.

Importing a CRL

const anchor = yield* RolesAnywhere.TrustAnchor("Anchor", {
  certificateBundle: CA_CERTIFICATE_PEM,
});
const crl = yield* RolesAnywhere.Crl("Crl", {
  crlData: CRL_PEM,
  trustAnchorArn: anchor.trustAnchorArn,
});

Rotating the CRL

const crl = yield* RolesAnywhere.Crl("Crl", {
  crlData: NEXT_CRL_PEM, // re-deploy with the CA's latest CRL
  trustAnchorArn: anchor.trustAnchorArn,
});