acm-pca

23 actions in the acm-pca service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

acm-pca:CreateCertificateAuthority

Write

Grants permission to create an AWS Private CA and its associated private key and configuration

acm-pca:CreateCertificateAuthorityAuditReport

Write

Grants permission to create an audit report for an AWS Private CA

acm-pca:CreatePermission

Permissions management

Grants permission to create a permission for an AWS Private CA

acm-pca:DeleteCertificateAuthority

Write

Grants permission to delete an AWS Private CA and its associated private key and configuration

acm-pca:DeletePermission

Permissions management

Grants permission to delete a permission for an AWS Private CA

acm-pca:DeletePolicy

Permissions management

Grants permission to delete the policy for an AWS Private CA

acm-pca:DescribeCertificateAuthority

Read

Grants permission to return a list of the configuration and status fields contained in the specified AWS Private CA

acm-pca:DescribeCertificateAuthorityAuditReport

Read

Grants permission to return the status and information about an AWS Private CA audit report

acm-pca:GetCertificate

Read

Grants permission to retrieve an AWS Private CA certificate and certificate chain for the certificate authority specified by an ARN

acm-pca:GetCertificateAuthorityCertificate

Read

Grants permission to retrieve an AWS Private CA certificate and certificate chain for the certificate authority specified by an ARN

acm-pca:GetCertificateAuthorityCsr

Read

Grants permission to retrieve an AWS Private CA certificate signing request (CSR) for the certificate-authority specified by an ARN

acm-pca:GetPolicy

Read

Grants permission to retrieve the policy on an AWS Private CA

acm-pca:ImportCertificateAuthorityCertificate

Write

Grants permission to import an SSL/TLS certificate into AWS Private CA for use as the CA certificate of an AWS Private CA

acm-pca:IssueCertificate

Write

Grants permission to issue an AWS Private CA certificate

acm-pca:ListCertificateAuthorities

List

Grants permission to retrieve a list of the AWS Private CA certificate authority ARNs, and a summary of the status of each CA in the calling account

acm-pca:ListPermissions

Read

Grants permission to list the permissions that have been applied to the AWS Private CA certificate authority

acm-pca:ListTags

Read

Grants permission to list the tags that have been applied to the AWS Private CA certificate authority

acm-pca:PutPolicy

Permissions management

Grants permission to put a policy on an AWS Private CA

acm-pca:RestoreCertificateAuthority

Write

Grants permission to restore an AWS Private CA from the deleted state to the state it was in when deleted

acm-pca:RevokeCertificate

Write

Grants permission to revoke a certificate issued by an AWS Private CA

acm-pca:TagCertificateAuthority

Tagging

Grants permission to add one or more tags to an AWS Private CA

acm-pca:UntagCertificateAuthority

Tagging

Grants permission to remove one or more tags from an AWS Private CA

acm-pca:UpdateCertificateAuthority

Write

Grants permission to update the configuration of an AWS Private CA