Skip to main content

policy_certificates

Creates, updates, deletes, gets or lists a policy_certificates resource.

Overview​

Namepolicy_certificates
TypeResource
Idazure.security_attestation.policy_certificates

Fields​

The following fields are returned by SELECT queries:

NameDatatypeDescription
tokenstringRFC7519 JSON Web Token containing PolicyCertificatesResults object.

Methods​

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectendpointRetrieves the set of certificates used to express policy for the current tenant. Retrieves the set of certificates used to express policy for the current tenant.
addexecendpointAdds a new attestation policy certificate to the set of policy management certificates. Adds a new attestation policy certificate to the set of policy management certificates.
removeexecendpointRemoves the specified policy management certificate. Note that the final policy management certificate cannot be removed. Removes the specified policy management certificate. Note that the final policy management certificate cannot be removed.

Parameters​

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
endpointstringThe service endpoint host (no scheme), e.g. myaccount.table.cosmos.azure.com:443 - value of the client endpoint parameter. (default: )

SELECT examples​

Retrieves the set of certificates used to express policy for the current tenant. Retrieves the set of certificates used to express policy for the current tenant.

SELECT
token
FROM azure.security_attestation.policy_certificates
WHERE endpoint = '{{ endpoint }}' -- required
;

Lifecycle Methods​

Adds a new attestation policy certificate to the set of policy management certificates. Adds a new attestation policy certificate to the set of policy management certificates.

EXEC azure.security_attestation.policy_certificates.add
@endpoint='{{ endpoint }}' --required
;