Lists information about your private certificate authority (CA). You specify the private CA on input by its ARN (Amazon Resource Name). The output contains the status of your CA. This can be any of the following:
acmpca_describe_certificate_authority(CertificateAuthorityArn)
[required] The Amazon Resource Name (ARN) that was returned when you called CreateCertificateAuthority. This must be of the form:
arn:aws:acm-pca:<i>region</i>:<i>account</i>:certificate-authority/<i>12345678-1234-1234-1234-123456789012</i>
.
svc$describe_certificate_authority( CertificateAuthorityArn = "string" )
CREATING
- ACM PCA is creating your private certificate authority.
PENDING_CERTIFICATE
- The certificate is pending. You must use
your on-premises root or subordinate CA to sign your private CA CSR
and then import it into PCA.
ACTIVE
- Your private CA is active.
DISABLED
- Your private CA has been disabled.
EXPIRED
- Your private CA certificate has expired.
FAILED
- Your private CA has failed. Your CA can fail because of
problems such a network outage or backend AWS failure or other
errors. A failed CA can never return to the pending state. You must
create a new CA.
DELETED
- Your private CA is within the restoration period, after
which it is permanently deleted. The length of time remaining in the
CA's restoration period is also included in this operation's
output.