Skip to main content

permission

Gets an individual permission resource

Overview

Namepermission
TypeResource
Descriptionpermission
Idawscc.acmpca.permission

Fields

NameDatatypeDescription
actionsarrayThe actions that the specified AWS service principal can use. Actions IssueCertificate, GetCertificate and ListPermissions must be provided.
certificate_authority_arnstringThe Amazon Resource Name (ARN) of the Private Certificate Authority that grants the permission.
principalstringThe AWS service or identity that receives the permission. At this time, the only valid principal is acm.amazonaws.com.
source_accountstringThe ID of the calling account.
regionstringAWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
actions,
certificate_authority_arn,
principal,
source_account
FROM awscc.acmpca.permission
WHERE data__Identifier = '<CertificateAuthorityArn>|<Principal>';

Permissions

To operate on the permission resource, the following permissions are required:

Read

acm-pca:ListPermissions

Delete

acm-pca:DeletePermission