CmdID / aws / aws acm-pca

aws acm-pca create-certificate-authority-audit-report

Creates an audit report that lists every time that your CA private key is used to issue a certificate. AWS CLI reference

1 example 3 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To create a certificate authority audit report

The following create-certificate-authority-audit-report example creates an audit report for the private CA identified by the ARN.

aws acm-pca create-certificate-authority-audit-report --certificate-authority-arn arn:aws:acm-pca:us-west-2:accountid:certificate-authority/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111 --s3-bucket-name your-bucket-name --audit-report-response-format JSON

Identify

--certificate-authority-arnThe Amazon Resource Name (ARN) of the CA to be audited.

--s3-bucket-nameThe name of the S3 bucket that will contain the audit report.

--audit-report-response-formatThe format in which to create the report.

Its output

{
    "AuditReportId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "S3Key": "audit-report/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111.json"
}

For more information, see Use audit reports with your private CA in the AWS Private Certificate Authority User Guide.

Options

3 in the AWS CLI reference

--audit-report-response-formatThe format in which to create the report.

--certificate-authority-arnThe Amazon Resource Name (ARN) of the CA to be audited.

--s3-bucket-nameThe name of the S3 bucket that will contain the audit report.