permission
Gets an individual permission
resource
Overview
Name | permission |
Type | Resource |
Description | permission |
Id | awscc.acmpca.permission |
Fields
Name | Datatype | Description |
---|---|---|
actions | array | The actions that the specified AWS service principal can use. Actions IssueCertificate, GetCertificate and ListPermissions must be provided. |
certificate_authority_arn | string | The Amazon Resource Name (ARN) of the Private Certificate Authority that grants the permission. |
principal | string | The AWS service or identity that receives the permission. At this time, the only valid principal is acm.amazonaws.com. |
source_account | string | The ID of the calling account. |
region | string | AWS region. |
Methods
Currently only SELECT
is supported for this resource resource.
Example
SELECT
region,
actions,
certificate_authority_arn,
principal,
source_account
FROM awscc.acmpca.permission
WHERE data__Identifier = '<CertificateAuthorityArn>|<Principal>';
Permissions
To operate on the permission
resource, the following permissions are required:
Read
acm-pca:ListPermissions
Delete
acm-pca:DeletePermission