AWS Private Certificate Authority

Hosted root and subordinate private CAs that issue X.509 certificates for internal PKI.

Provider: aws
Kind: Key management
Category: Security
Official docs: https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html
Also known as: ACM PCA

Properties · 4 set by this component

property	type	values	required	kind default	this component
caType · component property	enum	root \| subordinate	no	—	inherited
crlEnabled · component property	boolean	—	no	false	inherited
envelopeEncryption	boolean	—	no	false	▸ false
hsm	boolean	—	no	false	▸ true
keyStorageSecurityStandard · component property	enum	fips-140-2-level-2-or-higher \| fips-140-2-level-3-or-higher \| ccpc-level-1-or-higher	no	fips-140-2-level-3-or-higher	inherited
managed	boolean	—	no	true	▸ true
ocspEnabled · component property	boolean	—	no	false	inherited
rotationAutomated	boolean	—	no	false	▸ false
rotationDays	integer	—	no	—	inherited
usageMode · component property	enum	general-purpose \| short-lived-certificate	no	general-purpose	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "private-ca", component: "aws-private-ca" }

Other Key management products · 53

Certificate Management Servicealibaba-certificate-managementalibabacloudkey-management Data Encryption Servicealibaba-data-encryption-servicealibabacloudkey-management AWS Certificate Manageraws-acmawskey-management AWS KMSaws-kmsawskey-management AWS Payment Cryptographyaws-payment-cryptographyawskey-management AWS Secrets Manageraws-secrets-managerawskey-management AWS Signeraws-signerawskey-management AWS Systems Manager Parameter Storeaws-ssm-parameter-storeawskey-management AWS CloudHSMcloudhsmawskey-management Artifact Signingazure-artifact-signingazurekey-management Azure Cloud HSMazure-cloud-hsmazurekey-management Azure Dedicated HSMazure-dedicated-hsmazurekey-management Azure Key Vaultazure-key-vaultazurekey-management Azure Key Vault Managed HSMazure-managed-hsmazurekey-management Advanced Certificate Managercloudflare-advanced-certificate-managercloudflarekey-management Cloudflare Geo Key Managercloudflare-geo-key-managercloudflarekey-management Cloudflare Keyless SSLcloudflare-keyless-sslcloudflarekey-management Cloudflare mTLS client certificatescloudflare-mtlscloudflarekey-management Cloudflare Origin CAcloudflare-origin-cacloudflarekey-management Cloudflare Secrets Storecloudflare-secrets-storecloudflarekey-management Cloudflare Universal SSLcloudflare-ssl-tlscloudflarekey-management Bitwardenbitwardenkey-management cert-managercert-managerkey-management CyberArk Conjurconjurkey-management Dopplerdopplerkey-management EJBCAejbcakey-management Entrust nShield HSMentrust-nshieldkey-management HashiCorp Vaulthashicorp-vaultkey-management HCP Vault Dedicatedhcp-vaultkey-management Infisicalinfisicalkey-management Generic key managementkey-managementkey-management 1Password Connectonepassword-connectkey-management OpenBaoopenbaokey-management Sealed Secretssealed-secretskey-management Smallstep step-castep-cakey-management Thales Luna HSMthales-luna-hsmkey-management Certificate Authority Servicegoogle-certificate-authority-servicegcpkey-management Certificate Managergoogle-certificate-managergcpkey-management Cloud External Key Managergoogle-cloud-ekmgcpkey-management Cloud HSMgoogle-cloud-hsmgcpkey-management

and 13 more → Key management page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# AWS Private CA: hosted root and subordinate private certificate authorities issuing X.509
3# certificates. "What is AWS Private CA?" and the CreateCertificateAuthority API: CA keys default
4# to the FIPS 140-2 Level 3 or higher storage standard, UsageMode defaults to GENERAL_PURPOSE, and
5# both revocation mechanisms (CRL and OCSP) are disabled by default.
6schemaVersion: "1"
7type: "component"
8id: "aws-private-ca"
9kind: "key-management"
10provider: "aws"
11docs: "https://docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html"
12aliases: ["ACM PCA"]
13defaults:
14  managed: true
15  hsm: true
16  rotationAutomated: false
17  envelopeEncryption: false
18properties:
19  caType:
20    type: "enum"
21    values: ["root", "subordinate"]
22  usageMode:
23    type: "enum"
24    values: ["general-purpose", "short-lived-certificate"]
25    default: "general-purpose"
26  keyStorageSecurityStandard:
27    type: "enum"
28    values: ["fips-140-2-level-2-or-higher", "fips-140-2-level-3-or-higher", "ccpc-level-1-or-higher"]
29    default: "fips-140-2-level-3-or-higher"
30  crlEnabled:
31    type: "boolean"
32    default: false
33  ocspEnabled:
34    type: "boolean"
35    default: false

The same page as markdown, for an agent: /catalogue/components/aws-private-ca.md