# AWS Certificate Manager Private Certificate Authority API > AWS Certificate Manager Private Certificate Authority API on Apizie: 23 endpoints (Creates a root or subordinate private certificate authority (CA). You must specify the CA configuration, an…, Creates an audit report that lists every time that your CA private key is used. The report is saved in the…, Grants one or more permissions on a private CA to the Certificate Manager (ACM) service principal (…, Deletes a private certificate authority (CA). You must provide the Amazon Resource Name (ARN) of the private…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:amazonaws-acm-pca/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month. - Project key: `cloud:amazonaws-acm-pca` - Category: Cloud - Status: byok - Source: https://github.com/mermade/aws2openapi - Page: https://apizie.tech/api/cloud/amazonaws-acm-pca - OpenAPI: https://apizie.tech/api/cloud/amazonaws-acm-pca/openapi.json This is the Amazon Web Services Private Certificate Authority API Reference . It provides descriptions, syntax, and usage examples for each of the actions and data types involved in creating and managing a private… ## Endpoints ### Creates a root or subordinate private certificate authority (CA). You must specify the CA configuration, an… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/create-certificate-authority` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Creates an audit report that lists every time that your CA private key is used. The report is saved in the… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/create-certificate-authority-audit-report` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Grants one or more permissions on a private CA to the Certificate Manager (ACM) service principal (… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/create-permission` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Deletes a private certificate authority (CA). You must provide the Amazon Resource Name (ARN) of the private… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/delete-certificate-authority` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Revokes permissions on a private CA granted to the Certificate Manager (ACM) service principal… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/delete-permission` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Deletes the resource-based policy attached to a private CA. Deletion will remove any access that the policy… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/delete-policy` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Lists information about your private certificate authority (CA) or one that has been shared with you. You… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/describe-certificate-authority` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Lists information about a specific audit report created by calling the CreateCertificateAuthorityAuditReport… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/describe-certificate-authority-audit-report` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Retrieves a certificate from your private CA or one that has been shared with you. The ARN of the… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/get-certificate` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Retrieves the certificate and certificate chain for your private certificate authority (CA) or one that has… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/get-certificate-authority-certificate` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Retrieves the certificate signing request (CSR) for your private certificate authority (CA). The CSR is… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/get-certificate-authority-csr` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Retrieves the resource-based policy attached to a private CA. If either the private CA resource or the… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/get-policy` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Imports a signed private CA certificate into Amazon Web Services Private CA. This action is used when you… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/import-certificate-authority-certificate` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Uses your private certificate authority (CA), or one that has been shared with you, to issue a client… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/issue-certificate` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Lists the private certificate authorities that you created by using the CreateCertificateAuthority action. `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/list-certificate-authorities` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | MaxResults | integer | no | Pagination limit | | NextToken | string | no | Pagination token | | body | object | no | JSON request body | ### List all permissions on a private CA, if any, granted to the Certificate Manager (ACM) service principal… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/list-permissions` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | MaxResults | integer | no | Pagination limit | | NextToken | string | no | Pagination token | | body | object | no | JSON request body | ### Lists the tags, if any, that are associated with your private CA or one that has been shared with you. Tags… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/list-tags` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | MaxResults | integer | no | Pagination limit | | NextToken | string | no | Pagination token | | body | object | no | JSON request body | ### Attaches a resource-based policy to a private CA. A policy can also be applied by sharing a private CA… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/put-policy` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Restores a certificate authority (CA) that is in the DELETED state. You can restore a CA during the period… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/restore-certificate-authority` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Revokes a certificate that was issued inside Amazon Web Services Private CA. If you enable a certificate… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/revoke-certificate` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Adds one or more tags to your private CA. Tags are labels that you can use to identify and organize your… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/tag-certificate-authority` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Remove one or more tags from your private CA. A tag consists of a key-value pair. If you do not specify the… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/untag-certificate-authority` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ### Updates the status or configuration of a private certificate authority (CA). Your private CA must be in the… `POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/update-certificate-authority` (byok) | Parameter | Type | Required | Description | |---|---|---|---| | region | string | no | The AWS region | | body | object | no | JSON request body | ## Example ``` curl "https://apizie.tech/v1/cloud:amazonaws-acm-pca/create-certificate-authority" \ -H "x-api-key: $APIZIE_KEY" \ -H "x-upstream-key: $PROVIDER_KEY" ``` ## FAQ ### How do I call the AWS Certificate Manager Private Certificate Authority API? Create a free Apizie key, then send POST https://apizie.tech/v1/cloud:amazonaws-acm-pca/create-certificate-authority with the header x-api-key. Every endpoint returns { project, data, timestamp }. ### Is the AWS Certificate Manager Private Certificate Authority API free on Apizie? Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. AWS Certificate Manager Private Certificate Authority itself also needs your own key from amazonaws.com. ### Can AI agents use the AWS Certificate Manager Private Certificate Authority API? Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-acm-pca. ### What is the status of the AWS Certificate Manager Private Certificate Authority API? Needs your own provider key (bring your own key)