CmdID / aws / aws acm-pca
aws acm-pca create-certificate-authority
Creates a root or subordinate private certificate authority (CA). AWS CLI reference
7 options Its page in the AWS CLI reference
Options
--certificate-authority-configurationName and bit size of the private key algorithm, the name of the signing algorithm, and X.500 certificate subject information.--certificate-authority-typeThe type of the certificate authority.--idempotency-tokenCustom string that can be used to distinguish between calls to the CreateCertificateAuthority action.--key-storage-security-standardSpecifies a cryptographic key management compliance standard for handling and protecting CA keys.--revocation-configurationContains information to enable support for Online Certificate Status Protocol (OCSP), certificate revocation list (CRL), both protocols, or neither.--tagsKey-value pairs that will be attached to the new private CA.--usage-modeSpecifies whether the CA issues general-purpose certificates that typically require a revocation mechanism, or short-lived certificates that may optionally omit revocation because they expire quickly.