steampipe plugin install awssteampipe plugin install aws

Table: aws_acm_certificate

AWS Certificate Manager (ACM) handles the complexity of creating, storing, and renewing public and private SSL/TLS X.509 certificates and keys that protect the AWS websites and applications.

Examples

Basic info

select
  certificate_arn,
  domain_name,
  failure_reason,
  in_use_by,
  status,
  key_algorithm
from
  aws_acm_certificate;

List of expired certificates

select
  certificate_arn,
  domain_name,
  status
from
  aws_acm_certificate
where
  status = 'expired';

List certificates for which transparency logging is disabled

select
  certificate_arn,
  domain_name,
  status
from
  aws_acm_certificate
where
  certificate_transparency_logging_preference <> 'ENABLED';

List certificates without application tag key

select
  certificate_arn,
  turbot_tags
from
  aws_acm_certificate
where
  not turbot_tags :: JSONB ? 'application';

Query examples

.inspect aws_acm_certificate

AWS ACM Certificate

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
certificate	text	The ACM-issued certificate corresponding to the ARN specified as input
certificate_arn	text	Amazon Resource Name (ARN) of the certificate. This is of the form: arn:aws:acm:region:123456789012:certificate/12345678-1234-1234-1234-123456789012
certificate_chain	text	The ACM-issued certificate corresponding to the ARN specified as input
certificate_transparency_logging_preference	text	Indicates whether to opt in to or out of certificate transparency logging. Certificates that are not logged typically generate a browser error. Transparency makes it possible for you to detect SSL/TLS certificates that have been mistakenly or maliciously issued for your domain.
created_at	timestamp with time zone	The time at which the certificate was requested. This value exists only when the certificate type is AMAZON_ISSUED
domain_name	text	Fully qualified domain name (FQDN), such as www.example.com or example.com, for the certificate
domain_validation_options	jsonb	Contains information about the initial validation of each domain name that occurs as a result of the RequestCertificate request. This field exists only when the certificate type is AMAZON_ISSUED
extended_key_usages	jsonb	Specify one or more ExtendedKeyUsage extension values.
failure_reason	text	The reason the certificate request failed. This value exists only when the certificate status is FAILED
imported_at	timestamp with time zone	The name of the certificate authority that issued and signed the certificate
in_use_by	jsonb	A list of ARNs for the AWS resources that are using the certificate
issued_at	timestamp with time zone	A list of ARNs for the AWS resources that are using the certificate. A certificate can be used by multiple AWS resources
issuer	text	The name of the certificate authority that issued and signed the certificate
key_algorithm	text	The algorithm that was used to generate the public-private key pair
not_after	timestamp with time zone	The time after which the certificate is not valid
not_before	timestamp with time zone	The time before which the certificate is not valid
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text	The AWS Region in which the resource is located.
renewal_eligibility	text	Specifies whether the certificate is eligible for renewal.
revocation_reason	text	The reason the certificate was revoked. This value exists only when the certificate status is REVOKED
revoked_at	timestamp with time zone	The time at which the certificate was revoked. This value exists only when the certificate status is REVOKED
serial	text	The serial number of the certificate
signature_algorithm	text	The algorithm that was used to sign the certificate
status	text	The status of the certificate
subject	text	The name of the entity that is associated with the public key contained in the certificate
subject_alternative_names	jsonb	One or more domain names (subject alternative names) included in the certificate. This list contains the domain names that are bound to the public key that is contained in the certificate. The subject alternative names include the canonical domain name (CN) of the certificate and additional domain names that can be used to connect to the website
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags associated with certificate
title	text	Title of the resource.
type	text	The source of the certificate. For certificates provided by ACM, this value is AMAZON_ISSUED.

turbot/aws