Permission

Source: src/AWS/ACMPCA/Permission.ts

A permission on a private CA granted to the Certificate Manager (ACM) service principal, allowing ACM to automatically issue and renew ACM certificates signed by the CA.

Granting Permissions

Allow ACM to auto-renew certificates

import * as ACMPCA from "alchemy/AWS/ACMPCA";

const permission = yield* ACMPCA.Permission("AcmRenewal", {
  certificateAuthorityArn: ca.certificateAuthorityArn,
});

Restrict the granted actions

const permission = yield* ACMPCA.Permission("AcmIssueOnly", {
  certificateAuthorityArn: ca.certificateAuthorityArn,
  actions: ["IssueCertificate", "GetCertificate"],
});