Skip to content

CreatePermissionRequest

Source code in docs_src/capo_acm_pca/types/create_permission_request.py 
16
17
18
19
20
21
22
23
24
class CreatePermissionRequest(TypedDict, closed=True):
    certificate_authority_arn: "capo_acm_pca.types.arn.Arn"
    """<p>The Amazon Resource Name (ARN) of the CA that grants the permissions. You can find the ARN by calling the <a href="https://docs.aws.amazon.com/privateca/latest/APIReference/API_ListCertificateAuthorities.html">ListCertificateAuthorities</a> action. This must have the following form: </p> <p> <code>arn:aws:acm-pca:<i>region</i>:<i>account</i>:certificate-authority/<i>12345678-1234-1234-1234-123456789012</i> </code>. </p>"""
    principal: "capo_acm_pca.types.principal.Principal"
    """<p>The Amazon Web Services service or identity that receives the permission. At this time, the only valid principal is <code>acm.amazonaws.com</code>.</p>"""
    source_account: NotRequired["capo_acm_pca.types.account_id.AccountId"]
    """<p>The ID of the calling account.</p>"""
    actions: "capo_acm_pca.types.action_list.ActionList"
    """<p>The actions that the specified Amazon Web Services service principal can use. These include <code>IssueCertificate</code>, <code>GetCertificate</code>, and <code>ListPermissions</code>.</p>"""

actions instance-attribute 

actions: ActionList

The actions that the specified Amazon Web Services service principal can use. These include IssueCertificate, GetCertificate, and ListPermissions.

certificate_authority_arn instance-attribute 

certificate_authority_arn: Arn

The Amazon Resource Name (ARN) of the CA that grants the permissions. You can find the ARN by calling the ListCertificateAuthorities action. This must have the following form:

arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012 .

principal instance-attribute 

principal: Principal

The Amazon Web Services service or identity that receives the permission. At this time, the only valid principal is acm.amazonaws.com.

source_account instance-attribute 

source_account: NotRequired[AccountId]

The ID of the calling account.