---
title: ACM PCA Certificate Authority
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > ACM PCA Certificate Authority
---

# ACM PCA Certificate Authority

This table represents the ACM PCA Certificate Authority resource from Amazon Web Services.

```
aws.acmpca_certificateauthority
```

## Fields

| Title                               | ID   | Type       | Data Type                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Description |
| ----------------------------------- | ---- | ---------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| _key                                | core | string     |
| account_id                          | core | string     |
| arn                                 | core | string     | Amazon Resource Name (ARN) for your private certificate authority (CA). The format is <code> <i>12345678-1234-1234-1234-123456789012</i> </code>.                                                                                                                                                                                                                                                                                                                                                                            |
| certificate_authority_configuration | core | json       | Your private CA configuration.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| created_at                          | core | timestamp  | Date and time at which your private CA was created.                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| failure_reason                      | core | string     | Reason the request to create your private CA failed.                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| key_storage_security_standard       | core | string     | Defines a cryptographic key management compliance standard used for handling CA keys. Default: FIPS_140_2_LEVEL_3_OR_HIGHER Note: Amazon Web Services Region ap-northeast-3 supports only FIPS_140_2_LEVEL_2_OR_HIGHER. You must explicitly specify this parameter and value when creating a CA in that Region. Specifying a different value (or no value) results in an <code>InvalidArgsException</code> with the message "A certificate authority cannot be created in this region with the specified security standard." |
| last_state_change_at                | core | timestamp  | Date and time at which your private CA was last updated.                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| not_after                           | core | timestamp  | Date and time after which your private CA certificate is not valid.                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| not_before                          | core | timestamp  | Date and time before which your private CA certificate is not valid.                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| owner_account                       | core | string     | The Amazon Web Services account ID that owns the certificate authority.                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| restorable_until                    | core | timestamp  | The period during which a deleted CA can be restored. For more information, see the <code>PermanentDeletionTimeInDays</code> parameter of the <a href="https://docs.aws.amazon.com/privateca/latest/APIReference/API_DeleteCertificateAuthorityRequest.html">DeleteCertificateAuthorityRequest</a> action.                                                                                                                                                                                                                   |
| revocation_configuration            | core | json       | Information about the Online Certificate Status Protocol (OCSP) configuration or certificate revocation list (CRL) created and maintained by your private CA.                                                                                                                                                                                                                                                                                                                                                                |
| serial                              | core | string     | Serial number of your private CA.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| status                              | core | string     | Status of your private CA.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| tags                                | core | hstore_csv |
| type                                | core | string     | Type of your private CA.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| usage_mode                          | core | string     | Specifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly. Short-lived certificate validity is limited to seven days. The default value is GENERAL_PURPOSE.                                                                                                                                                                                                                    |