aws.iot-certificate

AWS IoT device X.509 certificate.

Filters

• config-compliance

• event

• finding

• list-item

• ops-item

• reduce

• value

Actions

• invoke-lambda

• invoke-sfn

• notify

• post-finding

• post-item

• put-metric

• set-inactive

• webhook

set-inactive

Deactivate an IoT device certificate.

example:

policies:
  - name: iot-cert-rotate-12-months
    resource: aws.iot-certificate
    filters:
      - type: value
        key: status
        value: ACTIVE
      - type: value
        key: creationDate
        value_type: age
        op: greater-than
        value: 365
    actions:
      - set-inactive

properties:
  type:
    enum:
    - set-inactive
required:
- type

Permissions - iot:UpdateCertificate