v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-14158359.3 KB

Claims an AWS CloudHSM cluster by submitting the cluster certificate issued by your issuing certificate authority (CA) and the CA's root certificate. Before you can claim a cluster, you must sign the cluster's certificate signing request (CSR) with your issuing CA. To get the cluster's CSR, use <a>DescribeClusters</a>.

post/#X-Amz-Target=BaldrApiService.InitializeCluster

Headers

X-Amz-Target'BaldrApiService.InitializeCluster' required

Request body

ClusterIdstring required

The identifier (ID) of the cluster that you are claiming. To find the cluster ID, use <a>DescribeClusters</a>.

SignedCertstring required

The cluster certificate issued (signed) by your issuing certificate authority (CA). The certificate must be in PEM format and can contain a maximum of 5000 characters.

TrustAnchorstring required

The issuing certificate of the issuing certificate authority (CA) that issued (signed) the cluster certificate. You must use a self-signed certificate. The certificate used to sign the HSM CSR must be directly available, and thus must be the root certificate. The certificate must be in PEM format and can contain a maximum of 5000 characters.

Response

Success

State'CREATE_IN_PROGRESS' | 'UNINITIALIZED' | 'INITIALIZE_IN_PROGRESS' | 'INITIALIZED' | 'ACTIVE' | 'UPDATE_IN_PROGRESS' | 'DELETE_IN_PROGRESS' | 'DELETED' | 'DEGRADED'

The cluster's state.

StateMessagestring

A description of the cluster's state.