in packages/aws-rfdk/lib/lambdas/nodejs/x509-certificate/types.ts [135:146]
export function implementsISecretCertificate(value: any): boolean {
if (!value || typeof(value) !== 'object') { return false; }
for (const key of ['Cert', 'Key', 'Passphrase']) {
if (!value[key] || typeof(value[key]) !== 'string') { return false; }
if (!isSecretArn(value[key])) { return false; }
}
if (value.CertChain) {
if (typeof(value.CertChain) !== 'string') { return false; }
if (value.CertChain !== '' && !isSecretArn(value.CertChain)) { return false; }
}
return true;
}