Aws/acmpca
@swamp/aws/acmpcav2026.10.25.1
01README
AWS ACMPCA infrastructure models
02Behaviors
@swamp/aws/acmpca/certificatev2026.10.23.1certificate.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| ApiPassthrough? | object | Specifies X.509 certificate information to be included in the issued certificate. An APIPassthrough or APICSRPassthrough template variant must be selected, or else this parameter is ignored. |
| CertificateAuthorityArn | string | The Amazon Resource Name (ARN) for the private CA issues the certificate. |
| CertificateSigningRequest | string | The certificate signing request (CSR) for the certificate. |
| SigningAlgorithm | string | The name of the algorithm that will be used to sign the certificate to be issued. This parameter should not be confused with the SigningAlgorithm parameter used to sign a CSR in the CreateCertificateAuthority action. The specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key. |
| TemplateArn? | string | Specifies a custom configuration template to use when issuing a certificate. If this parameter is not provided, PCAshort defaults to the EndEntityCertificate/V1 template. For more information about PCAshort templates, see [Using Templates](https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html). |
| Validity | object | The period of time during which the certificate will be valid. |
| ValidityNotBefore? | object | Information describing the start of the validity period of the certificate. This parameter sets the “Not Before" date for the certificate. By default, when issuing a certificate, PCAshort sets the "Not Before" date to the issuance time minus 60 minutes. This compensates for clock inconsistencies across computer systems. The ValidityNotBefore parameter can be used to customize the “Not Before” value. Unlike the Validity parameter, the ValidityNotBefore parameter is optional. The ValidityNotBefore |
fn create()
Create a ACMPCA Certificate
fn get(identifier: string)
Get a ACMPCA Certificate
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the ACMPCA Certificate |
fn delete(identifier: string)
Delete a ACMPCA Certificate
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the ACMPCA Certificate |
fn sync()
Sync ACMPCA Certificate state from AWS
Resources
state(infinite)— ACMPCA Certificate resource state
@swamp/aws/acmpca/certificate-authorityv2026.10.23.1certificate_authority.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| Type | string | The type of the certificate authority. |
| KeyAlgorithm | string | Public key algorithm and size, in bits, of the key pair that your CA creates when it issues a certificate. |
| SigningAlgorithm | string | Algorithm your CA uses to sign certificate requests. |
| Subject | object | Structure that contains X.500 distinguished name information for your CA. |
| RevocationConfiguration? | object | Certificate revocation information used by the CreateCertificateAuthority and UpdateCertificateAuthority actions. |
| Tags? | array | |
| CsrExtensions? | object | Structure that contains CSR pass through extension information used by the CreateCertificateAuthority action. |
| KeyStorageSecurityStandard? | string | KeyStorageSecurityStadard defines a cryptographic key management compliance standard used for handling CA keys. |
| UsageMode? | string | Usage mode of the ceritificate authority. |
fn create()
Create a ACMPCA CertificateAuthority
fn get(identifier: string)
Get a ACMPCA CertificateAuthority
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the ACMPCA CertificateAuthority |
fn update()
Update a ACMPCA CertificateAuthority
fn delete(identifier: string)
Delete a ACMPCA CertificateAuthority
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the ACMPCA CertificateAuthority |
fn sync()
Sync ACMPCA CertificateAuthority state from AWS
fn list(maxPages?: number, resourceModel?: string)
List ACMPCA CertificateAuthority resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— ACMPCA CertificateAuthority resource state
@swamp/aws/acmpca/certificate-authority-activationv2026.10.23.1certificate_authority_activation.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| CertificateAuthorityArn | string | Arn of the Certificate Authority. |
| Certificate | string | Certificate Authority certificate that will be installed in the Certificate Authority. |
| CertificateChain? | string | Certificate chain for the Certificate Authority certificate. |
| Status? | string | The status of the Certificate Authority. |
fn create()
Create a ACMPCA CertificateAuthorityActivation
fn get(identifier: string)
Get a ACMPCA CertificateAuthorityActivation
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the ACMPCA CertificateAuthorityActivation |
fn update()
Update a ACMPCA CertificateAuthorityActivation
fn delete(identifier: string)
Delete a ACMPCA CertificateAuthorityActivation
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the ACMPCA CertificateAuthorityActivation |
fn sync()
Sync ACMPCA CertificateAuthorityActivation state from AWS
Resources
state(infinite)— ACMPCA CertificateAuthorityActivation resource state
@swamp/aws/acmpca/permissionv2026.10.23.1permission.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| Actions | array | The actions that the specified AWS service principal can use. Actions IssueCertificate, GetCertificate and ListPermissions must be provided. |
| CertificateAuthorityArn | string | The Amazon Resource Name (ARN) of the Private Certificate Authority that grants the permission. |
| Principal | string | The AWS service or identity that receives the permission. At this time, the only valid principal is acm.amazonaws.com. |
| SourceAccount? | string | The ID of the calling account. |
fn create()
Create a ACMPCA Permission
fn get(identifier: string)
Get a ACMPCA Permission
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the ACMPCA Permission |
fn delete(identifier: string)
Delete a ACMPCA Permission
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the ACMPCA Permission |
fn sync()
Sync ACMPCA Permission state from AWS
Resources
state(infinite)— ACMPCA Permission resource state
03Previous Versions
2026.10.24.1AGPL-3.0-or-later
2026.10.23.1AGPL-3.0-or-later(was none)
- Updated: certificate, certificate_authority, certificate_authority_activation, permission
2026.10.13.1
- Updated: certificate, certificate_authority, certificate_authority_activation, permission
2026.10.08.1
2026.10.06.1
2026.10.04.1
2026.10.03.1
2026.10.02.1
2026.10.01.1
2026.09.30.1
2026.09.29.1
2026.09.28.1
2026.09.27.1
2026.09.26.1
2026.09.25.1
2026.09.24.1
2026.09.23.1
2026.09.22.1
2026.09.21.1
04Stats
A
100 / 100
Downloads
162
Archive size
826.6 KB
Verified by Swamp
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Docs keep secrets in a vault1/1earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License2/2earned
- Verified public repository2/2earned
05Platforms
06Labels