Private Certificate Authority

Prefix acm-pca, 23 actions · Domain Security, Identity & Compliance

18 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 4 are service-linked role policies, shown with permission data only.

User access (4)

AWSCertificateManagerPrivateCAFullAccessAdmin
AWSCertificateManagerPrivateCAReadOnlyReader
AWSPrivateCAFullAccessAdmin
AWSPrivateCAReadOnlyReader

Operator and limited (8)

AmazonWorkspacesPCAAccessOperator
AWSCertificateManagerPrivateCAAuditorOperator
AWSCertificateManagerPrivateCAPrivilegedUserOperator
AWSCertificateManagerPrivateCAUserOperator
AWSPrivateCAAuditorOperator
AWSPrivateCAConnectorForKubernetesPolicyOperator
AWSPrivateCAPrivilegedUserOperator
AWSPrivateCAUserOperator

Service roles (2)

AmazonAppStreamPCAAccessOperator
AmazonECSInfrastructureRolePolicyForServiceConnectTransportLayerSecurityOperator

Service-linked roles (4)

AlexaForBusinessNetworkProfileServicePolicyOperator
AWSRolesAnywhereServicePolicyOperator
AWSVPCS2SVpnServiceRolePolicyOperator
CertificateManagerServiceRolePolicyOperator

Also grants Private Certificate Authority actions (22)

Actions (23)

Private Certificate Authority actions that managed policies grant
Action	Access level	Policies granting without limits	Policies granting with resource or condition limits
acm-pca:CreateCertificateAuthority	Write	6	1
acm-pca:CreateCertificateAuthorityAuditReport	Write	6	3
acm-pca:CreatePermission	Permissions management	6	1
acm-pca:DeleteCertificateAuthority	Write	6	1
acm-pca:DeletePermission	Permissions management	6	1
acm-pca:DeletePolicy	Permissions management	6	1
acm-pca:DescribeCertificateAuthority	Read	22	10
acm-pca:DescribeCertificateAuthorityAuditReport	Read	15	3
acm-pca:GetCertificate	Read	15	12
acm-pca:GetCertificateAuthorityCertificate	Read	18	6
acm-pca:GetCertificateAuthorityCsr	Read	17	5
acm-pca:GetPolicy	Read	11	3
acm-pca:ImportCertificateAuthorityCertificate	Write	6	1
acm-pca:IssueCertificate	Write	7	10
acm-pca:ListCertificateAuthorities	List	27	3
acm-pca:ListPermissions	Read	14	7
acm-pca:ListTags	Read	18	5
acm-pca:PutPolicy	Permissions management	6	1
acm-pca:RestoreCertificateAuthority	Write	6	1
acm-pca:RevokeCertificate	Write	6	6
acm-pca:TagCertificateAuthority	Tagging	7	1
acm-pca:UntagCertificateAuthority	Tagging	7	1
acm-pca:UpdateCertificateAuthority	Write	6	1