{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/amazon-cloudhsm/json-schema/amazon-cloudhsm-create-hsm-request-schema.json",
  "title": "CreateHsmRequest",
  "x-generated": "2026-11-11",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/amazon-cloudhsm-hsm-api-openapi.yml#/components/schemas/CreateHsmRequest",
  "type": "object",
  "properties": {
    "SubnetId": {
      "type": "string",
      "description": "The identifier of the subnet in your VPC in which to place the HSM."
    },
    "SshKey": {
      "type": "string",
      "description": "The SSH public key to install on the HSM."
    },
    "EniIp": {
      "type": "string",
      "description": "The IP address to assign to the HSM's ENI. If an IP address is not specified, an IP address will be randomly chosen from the CIDR range of the subnet."
    },
    "IamRoleArn": {
      "type": "string",
      "description": "The ARN of an IAM role to enable the AWS CloudHSM service to allocate an ENI on your behalf."
    },
    "ExternalId": {
      "type": "string",
      "description": "The external ID from IamRoleArn, if present."
    },
    "SubscriptionType": {
      "type": "string",
      "enum": [
        "PRODUCTION"
      ]
    },
    "ClientToken": {
      "type": "string",
      "description": "A user-defined token to ensure idempotence. Subsequent calls to this operation with the same token will be ignored."
    },
    "SyslogIp": {
      "type": "string",
      "description": "The IP address for the syslog monitoring server. The AWS CloudHSM service only supports one syslog monitoring server."
    }
  },
  "required": [
    "SubnetId",
    "SshKey",
    "IamRoleArn",
    "SubscriptionType"
  ]
}