acm:RequestCertificate is a Write access-level action in the acm service. Grants permission to requests a public or private certificate
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants acm:RequestCertificate.
Filters access by certificateAuthority in the request. Can be used to restrict which Certificate Authorites certificates can be issued from
Filters access by certificateKeyPairOrigin in the request. Can be used to restrict which certificate provisioning paths are permitted
Filters access by certificateTransparencyLogging option in the request. Default 'ENABLED' if no key is present in the request
Filters access by domainNames in the request. This key can be used to restrict which domains can be in certificate requests
Filters access by the export option in the request. Can be used to restrict creation of certificates that can be exported
Filters access by keyAlgorithm in the request
Filters access by validationMethod in the request. Default 'EMAIL' if no key is present in the request
Filters access by the presence of tag key-value pairs in the request
Filters access by the presence of tag keys in the request
A minimal policy that allows acm:RequestCertificate. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowAcmRequestCertificate",
"Effect": "Allow",
"Action": "acm:RequestCertificate",
"Resource": "*"
}
]
}