/certificates - AWS IoT Wireless

Creates an X.509 certificate using the specified certificate signing request.

Note: The CSR must include a public key that is either an RSA key with a length of at least 2048 bits or an ECC key from NIST P-256 or NIST P-384 curves.

Note: Reusing the same certificate signing request (CSR) results in a distinct certificate.

Requires permission to access the CreateCertificateFromCsr action.

You can create multiple certificates in a batch by creating a directory, copying multiple .csr files into that directory, and then specifying that directory on the command line. The following commands show how to create a batch of certificates given a batch of CSRs.

Assuming a set of CSRs are located inside of the directory my-csr-directory:

On Linux and OS X, the command is:

l s m y - csr - d i rec t ory /∣ x a r g s - I a w s i o t cre a t e - cer t i f i c a t e - f ro m - csr - - cer t i f i c a t e - s i g nin g - re q u es t f i l e : // m y - csr - d i rec t ory / < / p >< p > T hi sco mman d l i s t s a ll o f t h e CSR s inm y - csr - d i rec t ory an d p i p ese a c h CSR f i l e nam e t o t h e a w s i o t cre a t e - cer t i f i c a t e - f ro m - csr A ma zo nW e b S er v i ces C L I co mman d t ocre a t e a cer t i f i c a t e f or t h ecorres p o n d in g CSR . < / p >< p > T h e a w s i o t cre a t e - cer t i f i c a t e - f ro m - csr p a r t o f t h eco mman d c ana l so b er u nin p a r a ll e lt os p ee d u pt h ecer t i f i c a t ecre a t i o n p rocess :< / p >< p >

ls my-csr-directory/ | xargs -P 10 -I {} aws iot create-certificate-from-csr --certificate-signing-request file://my-csr-directory/{}

On Windows PowerShell, the command to create certificates for all CSRs in my-csr-directory is:

> ls -Name my-csr-directory | %{aws iot create-certificate-from-csr --certificate-signing-request file://my-csr-directory/$_}

On a Windows command prompt, the command to create certificates for all CSRs in my-csr-directory is:

> forfiles /p my-csr-directory /c "cmd /c aws iot create-certificate-from-csr --certificate-signing-request file://@path"

curl --location -g --request POST 'https://api.iotwireless.{region}.amazonaws.com/certificates' \ --header 'Content-Type: application/json' \ --data-raw '{ "certificateSigningRequest": "string" }'

Responses

🟢200Success

application/json

Body

The output from the CreateCertificateFromCsr operation.

certificateArn

string

optional

The Amazon Resource Name (ARN) of the certificate. You can use the ARN as a principal for policy operations.

certificateId

string

optional

The ID of the certificate. Certificate management operations only take a certificateId.

>= 64 characters<= 64 characters

Match pattern:

(0x)?[a-fA-F0-9]+

certificatePem

string

optional

The certificate data, in PEM format.

>= 1 characters<= 4096 characters

Match pattern:

[^-A-Za-z0-9\+/=]\|=[^=]\|=\{3,\}$\{1,4096\}

🟠480InvalidRequestException

🟠481ThrottlingException

🟠482UnauthorizedException

🟠483ServiceUnavailableException

🟠484InternalFailureException