Linux command
aws-acm-pca 命令
文件
复制后可按需替换文件名、目录或参数。
常用示例
Create
aws acm-pca create-certificate-authority --certificate-authority-configuration [file://config.json] --certificate-authority-type ROOT
List
aws acm-pca list-certificate-authorities
Describe
aws acm-pca describe-certificate-authority --certificate-authority-arn [arn]
Issue
aws acm-pca issue-certificate --certificate-authority-arn [ca_arn] --csr [file://csr.pem] --signing-algorithm SHA256WITHRSA --validity [value]
Revoke
aws acm-pca revoke-certificate --certificate-authority-arn [ca_arn] --certificate-serial [serial] --revocation-reason KEY_COMPROMISE
Delete
aws acm-pca delete-certificate-authority --certificate-authority-arn [arn]
说明
AWS Certificate Manager Private Certificate Authority (ACM PCA) is a managed service that enables creation and management of private certificate authorities (CAs) for your organization. It provides a secure, scalable infrastructure for issuing and managing private SSL/TLS certificates without the overhead of operating your own CA infrastructure. Unlike public certificates from ACM, private certificates from ACM PCA are used for internal applications, microservices, VPNs, IoT devices, and other resources within your private networks. The service supports both root CAs and subordinate CAs, allowing you to build a complete public key infrastructure (PKI) hierarchy. ACM PCA handles the cryptographic operations and certificate lifecycle management, including certificate issuance, revocation via Certificate Revocation Lists (CRL) and Online Certificate Status Protocol (OCSP), and audit reporting. It integrates with AWS CloudTrail for comprehensive logging of all API calls and certificate operations. The service provides API-driven access through AWS SDKs, enabling automation of certificate issuance and management workflows. It supports various signing algorithms including RSA and ECDSA with different key sizes and hash functions.
FAQ
What is the aws-acm-pca command used for?
AWS Certificate Manager Private Certificate Authority (ACM PCA) is a managed service that enables creation and management of private certificate authorities (CAs) for your organization. It provides a secure, scalable infrastructure for issuing and managing private SSL/TLS certificates without the overhead of operating your own CA infrastructure. Unlike public certificates from ACM, private certificates from ACM PCA are used for internal applications, microservices, VPNs, IoT devices, and other resources within your private networks. The service supports both root CAs and subordinate CAs, allowing you to build a complete public key infrastructure (PKI) hierarchy. ACM PCA handles the cryptographic operations and certificate lifecycle management, including certificate issuance, revocation via Certificate Revocation Lists (CRL) and Online Certificate Status Protocol (OCSP), and audit reporting. It integrates with AWS CloudTrail for comprehensive logging of all API calls and certificate operations. The service provides API-driven access through AWS SDKs, enabling automation of certificate issuance and management workflows. It supports various signing algorithms including RSA and ECDSA with different key sizes and hash functions.
How do I run a basic aws-acm-pca example?
Run `aws acm-pca create-certificate-authority --certificate-authority-configuration [file://config.json] --certificate-authority-type ROOT` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
Where can I find more aws-acm-pca examples?
This page includes 6 examples for aws-acm-pca, plus related commands for nearby Linux tasks.