Skip to main content

policy_certificates

Creates, updates, deletes, gets or lists a policy_certificates resource.

Overview

Namepolicy_certificates
TypeResource
Idazure.security_attestation.policy_certificates

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
tokenstringRFC7519 JSON Web Token containing PolicyCertificatesResults object.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectendpointRetrieves the set of certificates used to express policy for the current tenant. Retrieves the set of certificates used to express policy for the current tenant.
addexecendpointAdds a new attestation policy certificate to the set of policy management certificates. Adds a new attestation policy certificate to the set of policy management certificates.
removeexecendpointRemoves the specified policy management certificate. Note that the final policy management certificate cannot be removed. Removes the specified policy management certificate. Note that the final policy management certificate cannot be removed.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
endpointstringThe service endpoint host (no scheme), e.g. myaccount.table.cosmos.azure.com:443 - value of the client endpoint parameter. (default: )

SELECT examples

Retrieves the set of certificates used to express policy for the current tenant. Retrieves the set of certificates used to express policy for the current tenant.

SELECT
token
FROM azure.security_attestation.policy_certificates
WHERE endpoint = '{{ endpoint }}' -- required
;

Lifecycle Methods

Adds a new attestation policy certificate to the set of policy management certificates. Adds a new attestation policy certificate to the set of policy management certificates.

EXEC azure.security_attestation.policy_certificates.add 
@endpoint='{{ endpoint }}' --required
;