Product logo
DocsBlogPricing

Permissions for @turbot/aws-acm

Taking a look at permissions and associated grant levels for each permission for ACM:

PermissionGrant LevelHelp
acm-pca:CreateCertificateAuthorityAdminAdmins can create a private subordinate certificate authority (CA).
acm-pca:CreateCertificateAuthorityAuditReportOperatorOperators can create an audit report for an certificate authority that lists every time that CA private key is used.
acm-pca:CreatePermissionAdmin
acm-pca:DeleteCertificateAuthorityAdmin
acm-pca:DeletePermissionAdmin
acm-pca:DeletePolicyAdmin
acm-pca:DescribeCertificateAuthorityAdminLists information about private certificate authority (CA).
acm-pca:DescribeCertificateAuthorityAuditReportAdmin
acm-pca:GetCertificateReadOnly
acm-pca:GetCertificateAuthorityCertificateReadOnly
acm-pca:GetCertificateAuthorityCsrReadOnly
acm-pca:GetPolicyMetadata
acm-pca:ImportCertificateAuthorityCertificateAdminAdmins can import signed private CA certificate into ACM PCA.
acm-pca:IssueCertificateAdminAdmins use private certificate authority (CA) to issue a client certificate.
acm-pca:ListCertificateAuthoritiesMetadata
acm-pca:ListPermissionsMetadata
acm-pca:ListTagsMetadata
acm-pca:PutPolicyAdmin
acm-pca:RestoreCertificateAuthorityAdmin
acm-pca:RevokeCertificateAdminAdmins can revoke a issued certificate.
acm-pca:TagCertificateAuthorityOperator
acm-pca:UntagCertificateAuthorityOperator
acm-pca:UpdateCertificateAuthorityAdmin
acm:AddTagsToCertificateOperatorOperators can manage tag metadata for certificates.
acm:DeleteCertificateAdmin
acm:DescribeCertificateMetadataCertificate contains no private keys or other sensitive data.
acm:ExportCertificateAdminAdmins can export a private certificate issued by a private certificate authority (CA) for use anywhere.
acm:GetAccountConfigurationMetadata
acm:GetCertificateMetadataCertificate contains no private keys or other sensitive data.
acm:ImportCertificateAdmin
acm:ListCertificatesMetadataCertificate contains no private keys or other sensitive data.
acm:ListTagsForCertificateMetadataCertificate tags contain no sensitive data.
acm:PutAccountConfigurationAdmin
acm:RemoveTagsFromCertificateOperatorOperators can manage tag metadata for certificates.
acm:RenewCertificateAdmin
acm:RequestCertificateAdmin
acm:ResendValidationEmailAdmin
acm:UpdateCertificateOptionsAdmin