aws-acmpca-certificate-authority-csr
A CA signing request can expose private PKI subject names and requested identity attributes, though not the private key.
Where it sits
| location | GetCertificateAuthorityCsr.Csr |
|---|---|
| location kind | certificate_material |
| data kinds | certificate pii sensitive_data |
| emits edge | ContainsSecret |
| service | ACM Private CA (aws:acmpca) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | GetCertificateAuthorityCsr |
| response path | Csr |
| encoding | string |
| params | {"CertificateAuthorityArn": "\u003cca-arn\u003e"} |
Required permissions
acm-pca:GetCertificateAuthorityCsr