aws-cdk-lib.aws_acmpca.CfnPermissionProps

CfnPermissionProps Struct

Properties for defining a CfnPermission.

Source

Generated code

Type last changed

v2.227.0 · 21 Nov 2025

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_acmpca as acmpca } from 'aws-cdk-lib';
const cfnPermissionProps: acmpca.CfnPermissionProps = {
  actions: ['actions'],
  certificateAuthorityArn: 'certificateAuthorityArn',
  principal: 'principal',

  // the properties below are optional
  sourceAccount: 'sourceAccount',
};

Properties

actionsstring[]actionstyping.List[str]actionsList<String>Actionsstring[]Actions*[]*stringrequired#

The private CA actions that can be performed by the designated AWS service.

Supported actions are IssueCertificate , GetCertificate , and ListPermissions .

certificateAuthorityArnstring | ICertificateAuthorityRefcertificate_authority_arntyping.Union[str, ICertificateAuthorityRef]certificateAuthorityArnStringCertificateAuthorityArnstringCertificateAuthorityArninterface{}required#

The Amazon Resource Number (ARN) of the private CA from which the permission was issued.

principalstringprincipalstrprincipalStringPrincipalstringPrincipal*stringrequired#

The AWS service or entity that holds the permission.

At this time, the only valid principal is acm.amazonaws.com .

sourceAccountstringsource_accountstrsourceAccountStringSourceAccountstringSourceAccount*string#

The ID of the account that assigned the permission.

Used as props by

• CfnPermission