ACM PCA Certificate Authority

Docs > DDSQL Reference > Data Directory > ACM PCA Certificate Authority

This table represents the ACM PCA Certificate Authority resource from Amazon Web Services.

aws.acmpca_certificateauthority

Fields

ID	Type	Data Type	Description
_key	core	string
account_id	core	string
arn	core	string	Amazon Resource Name (ARN) for your private certificate authority (CA). The format is <code> <i>12345678-1234-1234-1234-123456789012</i> </code>.
certificate_authority_configuration	core	json	Your private CA configuration.
created_at	core	timestamp	Date and time at which your private CA was created.
failure_reason	core	string	Reason the request to create your private CA failed.
key_storage_security_standard	core	string	Defines a cryptographic key management compliance standard used for handling CA keys. Default: FIPS_140_2_LEVEL_3_OR_HIGHER Note: Amazon Web Services Region ap-northeast-3 supports only FIPS_140_2_LEVEL_2_OR_HIGHER. You must explicitly specify this parameter and value when creating a CA in that Region. Specifying a different value (or no value) results in an <code>InvalidArgsException</code> with the message "A certificate authority cannot be created in this region with the specified security standard."
last_state_change_at	core	timestamp	Date and time at which your private CA was last updated.
not_after	core	timestamp	Date and time after which your private CA certificate is not valid.
not_before	core	timestamp	Date and time before which your private CA certificate is not valid.
owner_account	core	string	The Amazon Web Services account ID that owns the certificate authority.
restorable_until	core	timestamp	The period during which a deleted CA can be restored. For more information, see the <code>PermanentDeletionTimeInDays</code> parameter of the <a href="https://docs.aws.amazon.com/privateca/latest/APIReference/API_DeleteCertificateAuthorityRequest.html">DeleteCertificateAuthorityRequest</a> action.
revocation_configuration	core	json	Information about the Online Certificate Status Protocol (OCSP) configuration or certificate revocation list (CRL) created and maintained by your private CA.
serial	core	string	Serial number of your private CA.
status	core	string	Status of your private CA.
tags	core	hstore
type	core	string	Type of your private CA.
usage_mode	core	string	Specifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly. Short-lived certificate validity is limited to seven days. The default value is GENERAL_PURPOSE.