paws.security.identity (version 0.1.0)

acmpca_delete_permission: Revokes permissions that a private CA assigned to a designated AWS service

Description

Revokes permissions that a private CA assigned to a designated AWS service. Permissions can be created with the CreatePermission operation and listed with the ListPermissions operation.

Usage

acmpca_delete_permission(CertificateAuthorityArn, Principal,
  SourceAccount)

Arguments

CertificateAuthorityArn

[required] The Amazon Resource Number (ARN) of the private CA that issued the permissions. You can find the CA's ARN by calling the ListCertificateAuthorities operation. This must have the following form:

arn:aws:acm-pca:<i>region</i>:<i>account</i>:certificate-authority/<i>12345678-1234-1234-1234-123456789012</i> .

Principal

[required] The AWS service or identity that will have its CA permissions revoked. At this time, the only valid service principal is acm.amazonaws.com

SourceAccount

The AWS account that calls this operation.

Request syntax

svc$delete_permission(
  CertificateAuthorityArn = "string",
  Principal = "string",
  SourceAccount = "string"
)