# CfnPermissionProps

Properties for defining a `CfnPermission`.

Extends: CfnPermissionProps
Used as props by: CfnPermission

- Source: Generated code
- Type last changed: v2.227.0 · 21 Nov 2025

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_acmpca as acmpca } from 'aws-cdk-lib';
const cfnPermissionProps: acmpca.CfnPermissionProps = {
  actions: ['actions'],
  certificateAuthorityArn: 'certificateAuthorityArn',
  principal: 'principal',

  // the properties below are optional
  sourceAccount: 'sourceAccount',
};
```

## Properties

- `actions`: string[] (required) — The private CA actions that can be performed by the designated AWS service.

  Supported actions are `IssueCertificate` , `GetCertificate` , and `ListPermissions` .

- `certificateAuthorityArn`: string | [ICertificateAuthorityRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_acmpca.ICertificateAuthorityRef.html) (required) — The Amazon Resource Number (ARN) of the private CA from which the permission was issued.

- `principal`: string (required) — The AWS service or entity that holds the permission.

  At this time, the only valid principal is `acm.amazonaws.com` .

- `sourceAccount`: string — The ID of the account that assigned the permission.