Certificate Manager
Prefix acm, 42 actions · Domain Security, Identity & Compliance
8 AWS managed policies. 2 have reviewed guidance; the rest have authoritative permission data pending editorial review. 4 are service-linked role policies, shown with permission data only.
User access (2)
Operator and limited (2)
Service-linked roles (4)
Also grants Certificate Manager actions (46)
- AdministratorAccess
- AdministratorAccess-AWSElasticBeanstalk
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonCognitoPowerUser
- AmazonECSInfrastructureRoleforExpressGatewayServices
- AmazonECSInfrastructureRoleForGatewayHostSharedALB
- AmazonEKSLoadBalancingPolicy
- AmazonElasticsearchServiceRolePolicy
- AmazonOpenSearchServiceRolePolicy
- AmazonSageMakerHyperPodInferenceAccess
- APIGatewayServiceRolePolicy
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSAppMeshFullAccess
- AWSAppMeshReadOnly
- AWSAuditManagerServiceRolePolicy
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSElasticBeanstalkReadOnly
- AWSElasticBeanstalkRoleCore
- AWSElasticBeanstalkServiceRolePolicy
- AWSIoTDeviceTesterForFreeRTOSFullAccess
- AWSMcpServiceActionsFullAccess
- AWSNetworkFirewallIGWServiceRolePolicy
- AWSNetworkFirewallServiceRolePolicy
- AWSPartnerLedSupportReadOnlyAccess
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSTransferConsoleFullAccess
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- ClientVPNServiceRolePolicy
- CloudFrontFullAccess
- CloudFrontReadOnlyAccess
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- SupportUser
- SystemAdministrator
- ViewOnlyAccess
- VPCLatticeFullAccess
- VPCLatticeReadOnlyAccess
- WellArchitectedAgentResourceScanning
addtagstocertificate createacmedomainvalidation createacmeendpoint createacmeexternalaccountbinding createtimestamp deleteacmedomainvalidation deleteacmeendpoint deleteacmeexternalaccountbinding deletecertificate describeacmeaccount describeacmedomainvalidation describeacmeendpoint describeacmeexternalaccountbinding describecertificate exportcertificate getaccountconfiguration getacmeexternalaccountbindingcredentials getcertificate importcertificate listacmeaccounts listacmedomainvalidations listacmeendpoints listacmeexternalaccountbindings listcertificatedomainvalidations listcertificates listtagsforcertificate listtagsforresource putaccountconfiguration removetagsfromcertificate renewcertificate requestcertificate resendvalidationemail revokeacmeaccount revokeacmeexternalaccountbinding revokecertificate searchcertificates tagresource untagresource updateacmedomainvalidation updateacmeendpoint updatecertificate updatecertificateoptions
Actions (42)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| acm:AddTagsToCertificate | Tagging | 6 | 8 |
| acm:CreateAcmeDomainValidation | Write | 5 | 1 |
| acm:CreateAcmeEndpoint | Write | 5 | 1 |
| acm:CreateAcmeExternalAccountBinding | Write | 5 | 1 |
| acm:CreateTimeStamp | Write | 5 | 1 |
| acm:DeleteAcmeDomainValidation | Write | 5 | 1 |
| acm:DeleteAcmeEndpoint | Write | 5 | 1 |
| acm:DeleteAcmeExternalAccountBinding | Write | 5 | 1 |
| acm:DeleteCertificate | Write | 5 | 8 |
| acm:DescribeAcmeAccount | Read | 13 | 1 |
| acm:DescribeAcmeDomainValidation | Read | 13 | 1 |
| acm:DescribeAcmeEndpoint | Read | 13 | 1 |
| acm:DescribeAcmeExternalAccountBinding | Read | 13 | 1 |
| acm:DescribeCertificate | Read | 36 | 9 |
| acm:ExportCertificate | Read | 6 | 1 |
| acm:GetAccountConfiguration | Read | 16 | 1 |
| acm:GetAcmeExternalAccountBindingCredentials | Read | 7 | 1 |
| acm:GetCertificate | Read | 13 | 3 |
| acm:ImportCertificate | Write | 5 | 4 |
| acm:ListAcmeAccounts | List | 14 | 1 |
| acm:ListAcmeDomainValidations | List | 14 | 1 |
| acm:ListAcmeEndpoints | List | 14 | 1 |
| acm:ListAcmeExternalAccountBindings | List | 14 | 1 |
| acm:ListCertificateDomainValidations | List | 14 | 1 |
| acm:ListCertificates | List | 33 | 3 |
| acm:ListTagsForCertificate | Read | 18 | 4 |
| acm:ListTagsForResource | Read | 13 | 1 |
| acm:PutAccountConfiguration | Write | 5 | 1 |
| acm:RemoveTagsFromCertificate | Tagging | 6 | 2 |
| acm:RenewCertificate | Write | 5 | 1 |
| acm:RequestCertificate | Write | 6 | 6 |
| acm:ResendValidationEmail | Write | 6 | 1 |
| acm:RevokeAcmeAccount | Write | 5 | 1 |
| acm:RevokeAcmeExternalAccountBinding | Write | 5 | 1 |
| acm:RevokeCertificate | Write | 5 | 1 |
| acm:SearchCertificates | List | 8 | 1 |
| acm:TagResource | Tagging | 5 | 1 |
| acm:UntagResource | Tagging | 5 | 1 |
| acm:UpdateAcmeDomainValidation | Write | 5 | 1 |
| acm:UpdateAcmeEndpoint | Write | 5 | 1 |
| acm:UpdateCertificate | Write | 5 | 1 |
| acm:UpdateCertificateOptions | Write | 5 | 1 |