Deletes a private certificate authority (CA). You must provide the ARN
(Amazon Resource Name) of the private CA that you want to delete. You
can find the ARN by calling the ListCertificateAuthorities operation.
Before you can delete a CA, you must disable it. Call the
UpdateCertificateAuthority operation and set the
CertificateAuthorityStatus parameter to DISABLED.
acmpca_delete_certificate_authority(CertificateAuthorityArn,
PermanentDeletionTimeInDays)[required] The Amazon Resource Name (ARN) that was returned when you called CreateCertificateAuthority. This must have the following form:
arn:aws:acm-pca:<i>region</i>:<i>account</i>:certificate-authority/<i>12345678-1234-1234-1234-123456789012</i> .
The number of days to make a CA restorable after it has been deleted. This can be anywhere from 7 to 30 days, with 30 being the default.
svc$delete_certificate_authority( CertificateAuthorityArn = "string", PermanentDeletionTimeInDays = 123 )
Additionally, you can delete a CA if you are waiting for it to be
created (the Status field of the CertificateAuthority is
CREATING). You can also delete it if the CA has been created but you
haven't yet imported the signed certificate (the Status is
PENDING_CERTIFICATE) into ACM PCA.
If the CA is in one of the previously mentioned states and you call
DeleteCertificateAuthority, the CA's status changes to DELETED.
However, the CA won't be permanently deleted until the restoration
period has passed. By default, if you do not set the
PermanentDeletionTimeInDays parameter, the CA remains restorable for
30 days. You can set the parameter from 7 to 30 days. The
DescribeCertificateAuthority operation returns the time remaining in the
restoration window of a Private CA in the DELETED state. To restore an
eligible CA, call the RestoreCertificateAuthority operation.