AWS 私有 CA API 操作和許可 - AWS 私有憑證授權單位

本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。

AWS 私有 CA API 操作和許可

當您設定要連接到 IAM 身分的存取控制和許可政策 （以身分為基礎的政策） 時，請使用下表做為參考。表格中的第一欄會列出每個 AWS 私有 CA API 操作。您可以在政策的 Action 元素中指定動作。其餘欄位提供其他資訊。

AWS 私有 CA API 操作 所需的許可 Resources

CreateCertificateAuthority

acm-pca:CreateCertificateAuthority

acm-pca:TagCertificateAuthority （只有在建立具有標籤的 CA 時才需要。)

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

CreateCertificateAuthorityAuditReport

acm-pca:CreateCertificateAuthorityAuditReport

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566
CreatePermission acm-pca:CreatePermission arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

DeleteCertificateAuthority

acm-pca:DeleteCertificateAuthority

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566
DeletePermission acm-pca:DeletePermission arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566
DeletePolicy acm-pca:DeletePolicy arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

DescribeCertificateAuthority

acm-pca:DescribeCertificateAuthority

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

DescribeCertificateAuthorityAuditReport

acm-pca:DescribeCertificateAuthorityAuditReport

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

GetCertificate

acm-pca:GetCertificate

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

GetCertificateAuthorityCertificate

acm-pca:GetCertificateAuthorityCertificate

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

GetCertificateAuthorityCsr

acm-pca:GetCertificateAuthorityCsr

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566
GetPolicy acm-pca:GetPolicy arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

ImportCertificateAuthorityCertificate

acm-pca:ImportCertificateAuthorityCertificate

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

IssueCertificate

acm-pca:IssueCertificate

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

ListCertificateAuthorities

acm-pca:ListCertificateAuthorities

N/A
ListPermissions acm-pca:ListPermissions arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

ListTags

acm-pca:ListTags

N/A
PutPolicy acm-pca:PutPolicy arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

RevokeCertificate

acm-pca:RevokeCertificate

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

TagCertificateAuthority

acm-pca:TagCertificateAuthority

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

UntagCertificateAuthority

acm-pca:UntagCertificateAuthority

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

UpdateCertificateAuthority

acm-pca:UpdateCertificateAuthority

arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566

若要提供存取權，請新增權限至您的使用者、群組或角色：

  • 中的使用者和群組 AWS IAM Identity Center：

    建立權限合集。請按照《AWS IAM Identity Center 使用者指南》中的建立權限合集說明進行操作。

  • 透過身分提供者在 IAM 中管理的使用者：

    建立聯合身分的角色。遵循《IAM 使用者指南》的為第三方身分提供者 (聯合) 建立角色中的指示。

  • IAM 使用者：