AWS govcloud-us documentation change
Summary
Added AWS GovCloud-specific ARN patterns for private CAs, certificates, and templates
Security assessment
Regional ARN documentation update without security context. No security features or vulnerabilities addressed.
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-acmpca.md b/govcloud-us/latest/UserGuide/govcloud-acmpca.md index dac579700..d59ea2c63 100644 --- a//govcloud-us/latest/UserGuide/govcloud-acmpca.md +++ b//govcloud-us/latest/UserGuide/govcloud-acmpca.md @@ -22,0 +23,10 @@ The following differences apply to AWS Private CA: + * The Amazon Resource Name (ARN) for a private certificate authority has a AWS GovCloud (US) pattern of `arn:aws-us-gov:acm-pca:<region>:<account-id>:certificate-authority/<CA-ID>` + +You can find this ARN on the **CA details** page in the AWS Private CA console. + + * The ARN for a certificate issued by a private CA has a AWS GovCloud (US) pattern of `arn:aws-us-gov:acm-pca:<region>:<account-id>:certificate-authority/<CA-ID>/certificate/<CertificateID>` + + * The ARNs for certificate templates used with the `IssueCertificate` API action have a AWS GovCloud (US) pattern of `arn:aws-us-gov:acm-pca:::template/<TemplateName>/V1` + +For example, `arn:aws-us-gov:acm-pca:::template/EndEntityCertificate/V1`. For the complete list of available template names, see [Using certificate templates](https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html) in the AWS Private Certificate Authority User Guide. +