Skip to main content

@swamp/aws/acmpca

v2026.04.23.3

AWS ACMPCA infrastructure models

Repository

https://github.com/systeminit/swamp-extensions

Labels

awsacmpcacloudinfrastructure

Contents

Quality score

Verified by Swamp

How well-documented and verifiable this extension is.

100%

Grade A

  • Has README or module doc2/2earned
  • README has a code example1/1earned
  • README is substantive1/1earned
  • Most symbols documented1/1earned
  • No slow types1/1earned
  • Has description1/1earned
  • At least one platform tag (or universal)1/1earned
  • Two or more platform tags (or universal)1/1earned
  • License declared1/1earned
  • Verified public repository2/2earned

Install

$ swamp extension pull @swamp/aws/acmpca

@swamp/aws/acmpca/certificatev2026.04.23.2certificate.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
ApiPassthrough?objectSpecifies X.509 certificate information to be included in the issued certificate. An APIPassthrough or APICSRPassthrough template variant must be selected, or else this parameter is ignored.
CertificateAuthorityArnstringThe Amazon Resource Name (ARN) for the private CA issues the certificate.
CertificateSigningRequeststringThe certificate signing request (CSR) for the certificate.
SigningAlgorithmstringThe name of the algorithm that will be used to sign the certificate to be issued. This parameter should not be confused with the SigningAlgorithm parameter used to sign a CSR in the CreateCertificateAuthority action. The specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key.
TemplateArn?stringSpecifies a custom configuration template to use when issuing a certificate. If this parameter is not provided, PCAshort defaults to the EndEntityCertificate/V1 template. For more information about PCAshort templates, see [Using Templates](https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html).
ValidityobjectThe period of time during which the certificate will be valid.
ValidityNotBefore?objectInformation describing the start of the validity period of the certificate. This parameter sets the “Not Before" date for the certificate. By default, when issuing a certificate, PCAshort sets the "Not Before" date to the issuance time minus 60 minutes. This compensates for clock inconsistencies across computer systems. The ValidityNotBefore parameter can be used to customize the “Not Before” value. Unlike the Validity parameter, the ValidityNotBefore parameter is optional. The ValidityNotBefore
createCreate a ACMPCA Certificate
getGet a ACMPCA Certificate
ArgumentTypeDescription
identifierstringThe primary identifier of the ACMPCA Certificate
deleteDelete a ACMPCA Certificate
ArgumentTypeDescription
identifierstringThe primary identifier of the ACMPCA Certificate
syncSync ACMPCA Certificate state from AWS

Resources

state(infinite)— ACMPCA Certificate resource state
@swamp/aws/acmpca/certificate-authorityv2026.04.23.2certificate_authority.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
TypestringThe type of the certificate authority.
KeyAlgorithmstringPublic key algorithm and size, in bits, of the key pair that your CA creates when it issues a certificate.
SigningAlgorithmstringAlgorithm your CA uses to sign certificate requests.
SubjectobjectStructure that contains X.500 distinguished name information for your CA.
RevocationConfiguration?objectCertificate revocation information used by the CreateCertificateAuthority and UpdateCertificateAuthority actions.
Tags?array
CsrExtensions?objectStructure that contains CSR pass through extension information used by the CreateCertificateAuthority action.
KeyStorageSecurityStandard?stringKeyStorageSecurityStadard defines a cryptographic key management compliance standard used for handling CA keys.
UsageMode?stringUsage mode of the ceritificate authority.
createCreate a ACMPCA CertificateAuthority
getGet a ACMPCA CertificateAuthority
ArgumentTypeDescription
identifierstringThe primary identifier of the ACMPCA CertificateAuthority
updateUpdate a ACMPCA CertificateAuthority
deleteDelete a ACMPCA CertificateAuthority
ArgumentTypeDescription
identifierstringThe primary identifier of the ACMPCA CertificateAuthority
syncSync ACMPCA CertificateAuthority state from AWS

Resources

state(infinite)— ACMPCA CertificateAuthority resource state
@swamp/aws/acmpca/certificate-authority-activationv2026.04.23.2certificate_authority_activation.ts

Global Arguments

ArgumentTypeDescription
CertificateAuthorityArnstringArn of the Certificate Authority.
CertificatestringCertificate Authority certificate that will be installed in the Certificate Authority.
CertificateChain?stringCertificate chain for the Certificate Authority certificate.
Status?stringThe status of the Certificate Authority.
createCreate a ACMPCA CertificateAuthorityActivation
getGet a ACMPCA CertificateAuthorityActivation
ArgumentTypeDescription
identifierstringThe primary identifier of the ACMPCA CertificateAuthorityActivation
updateUpdate a ACMPCA CertificateAuthorityActivation
deleteDelete a ACMPCA CertificateAuthorityActivation
ArgumentTypeDescription
identifierstringThe primary identifier of the ACMPCA CertificateAuthorityActivation
syncSync ACMPCA CertificateAuthorityActivation state from AWS

Resources

state(infinite)— ACMPCA CertificateAuthorityActivation resource state
@swamp/aws/acmpca/permissionv2026.04.23.2permission.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
ActionsarrayThe actions that the specified AWS service principal can use. Actions IssueCertificate, GetCertificate and ListPermissions must be provided.
CertificateAuthorityArnstringThe Amazon Resource Name (ARN) of the Private Certificate Authority that grants the permission.
PrincipalstringThe AWS service or identity that receives the permission. At this time, the only valid principal is acm.amazonaws.com.
SourceAccount?stringThe ID of the calling account.
createCreate a ACMPCA Permission
getGet a ACMPCA Permission
ArgumentTypeDescription
identifierstringThe primary identifier of the ACMPCA Permission
deleteDelete a ACMPCA Permission
ArgumentTypeDescription
identifierstringThe primary identifier of the ACMPCA Permission
syncSync ACMPCA Permission state from AWS

Resources

state(infinite)— ACMPCA Permission resource state