acm:RevokeCertificate is a Write access-level action in the acm service. Grants permission to revoke an exportable certificate
ARNs that acm:RevokeCertificate can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants acm:RevokeCertificate.
Filters access by certificateKeyPairOrigin in the request. Can be used to restrict which certificate provisioning paths are permitted
Filters access by domainNames in the request. This key can be used to restrict which domains can be in certificate requests
Filters access by tag key-value pairs attached to the resource
A minimal policy that allows acm:RevokeCertificate. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowAcmRevokeCertificate",
"Effect": "Allow",
"Action": "acm:RevokeCertificate",
"Resource": "*"
}
]
}