pca-connector-scep:CreateChallenge is a Write access-level action in the pca-connector-scep service. Grants permission to create a Challenge for a Connector
ARNs that pca-connector-scep:CreateChallenge can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants pca-connector-scep:CreateChallenge.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the tags associated with the resource
A minimal policy that allows pca-connector-scep:CreateChallenge. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowPcaconnectorscepCreateChallenge",
"Effect": "Allow",
"Action": "pca-connector-scep:CreateChallenge",
"Resource": "*"
}
]
}