Skip to content

ACMPCAClient

Index > ACMPCA > ACMPCAClient

Auto-generated documentation for ACMPCA type annotations stubs module mypy-boto3-acm-pca.

ACMPCAClient

Type annotations and code completion for boto3.client("acm-pca"). boto3 documentation

Usage example
from boto3.session import Session
from mypy_boto3_acm_pca.client import ACMPCAClient

def get_acm-pca_client() -> ACMPCAClient:
    return Session().client("acm-pca")

Exceptions

boto3 client exceptions are generated in runtime. This class provides code completion for boto3.client("acm-pca").exceptions structure.

Usage example
client = boto3.client("acm-pca")

try:
    do_something(client)
except (
    client.CertificateMismatchException,
    client.ClientError,
    client.ConcurrentModificationException,
    client.InvalidArgsException,
    client.InvalidArnException,
    client.InvalidNextTokenException,
    client.InvalidPolicyException,
    client.InvalidRequestException,
    client.InvalidStateException,
    client.InvalidTagException,
    client.LimitExceededException,
    client.LockoutPreventedException,
    client.MalformedCSRException,
    client.MalformedCertificateException,
    client.PermissionAlreadyExistsException,
    client.RequestAlreadyProcessedException,
    client.RequestFailedException,
    client.RequestInProgressException,
    client.ResourceNotFoundException,
    client.TooManyTagsException,
) as e:
    print(e)
Type checking example
from mypy_boto3_acm_pca.client import Exceptions

def handle_error(exc: Exceptions.CertificateMismatchException) -> None:
    ...

Methods

can_paginate

Check if an operation can be paginated.

Type annotations and code completion for boto3.client("acm-pca").can_paginate method. boto3 documentation

Method definition
def can_paginate(
    self,
    operation_name: str,
) -> bool:
    ...

close

Closes underlying endpoint connections.

Type annotations and code completion for boto3.client("acm-pca").close method. boto3 documentation

Method definition
def close(
    self,
) -> None:
    ...

create_certificate_authority

Creates a root or subordinate private certificate authority (CA).

Type annotations and code completion for boto3.client("acm-pca").create_certificate_authority method. boto3 documentation

Method definition
def create_certificate_authority(
    self,
    *,
    CertificateAuthorityConfiguration: CertificateAuthorityConfigurationTypeDef,  # (1)
    CertificateAuthorityType: CertificateAuthorityTypeType,  # (2)
    RevocationConfiguration: RevocationConfigurationTypeDef = ...,  # (3)
    IdempotencyToken: str = ...,
    KeyStorageSecurityStandard: KeyStorageSecurityStandardType = ...,  # (4)
    Tags: Sequence[TagTypeDef] = ...,  # (5)
    UsageMode: CertificateAuthorityUsageModeType = ...,  # (6)
) -> CreateCertificateAuthorityResponseTypeDef:  # (7)
    ...
  1. See CertificateAuthorityConfigurationTypeDef
  2. See CertificateAuthorityTypeType
  3. See RevocationConfigurationTypeDef
  4. See KeyStorageSecurityStandardType
  5. See TagTypeDef
  6. See CertificateAuthorityUsageModeType
  7. See CreateCertificateAuthorityResponseTypeDef
Usage example with kwargs
kwargs: CreateCertificateAuthorityRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityConfiguration": ...,
    "CertificateAuthorityType": ...,
}

parent.create_certificate_authority(**kwargs)
  1. See CreateCertificateAuthorityRequestRequestTypeDef

create_certificate_authority_audit_report

Creates an audit report that lists every time that your CA private key is used.

Type annotations and code completion for boto3.client("acm-pca").create_certificate_authority_audit_report method. boto3 documentation

Method definition
def create_certificate_authority_audit_report(
    self,
    *,
    CertificateAuthorityArn: str,
    S3BucketName: str,
    AuditReportResponseFormat: AuditReportResponseFormatType,  # (1)
) -> CreateCertificateAuthorityAuditReportResponseTypeDef:  # (2)
    ...
  1. See AuditReportResponseFormatType
  2. See CreateCertificateAuthorityAuditReportResponseTypeDef
Usage example with kwargs
kwargs: CreateCertificateAuthorityAuditReportRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
    "S3BucketName": ...,
    "AuditReportResponseFormat": ...,
}

parent.create_certificate_authority_audit_report(**kwargs)
  1. See CreateCertificateAuthorityAuditReportRequestRequestTypeDef

create_permission

Grants one or more permissions on a private CA to the Certificate Manager (ACM) service principal ( acm.amazonaws.com ).

Type annotations and code completion for boto3.client("acm-pca").create_permission method. boto3 documentation

Method definition
def create_permission(
    self,
    *,
    CertificateAuthorityArn: str,
    Principal: str,
    Actions: Sequence[ActionTypeType],  # (1)
    SourceAccount: str = ...,
) -> EmptyResponseMetadataTypeDef:  # (2)
    ...
  1. See ActionTypeType
  2. See EmptyResponseMetadataTypeDef
Usage example with kwargs
kwargs: CreatePermissionRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
    "Principal": ...,
    "Actions": ...,
}

parent.create_permission(**kwargs)
  1. See CreatePermissionRequestRequestTypeDef

delete_certificate_authority

Deletes a private certificate authority (CA).

Type annotations and code completion for boto3.client("acm-pca").delete_certificate_authority method. boto3 documentation

Method definition
def delete_certificate_authority(
    self,
    *,
    CertificateAuthorityArn: str,
    PermanentDeletionTimeInDays: int = ...,
) -> EmptyResponseMetadataTypeDef:  # (1)
    ...
  1. See EmptyResponseMetadataTypeDef
Usage example with kwargs
kwargs: DeleteCertificateAuthorityRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
}

parent.delete_certificate_authority(**kwargs)
  1. See DeleteCertificateAuthorityRequestRequestTypeDef

delete_permission

Revokes permissions on a private CA granted to the Certificate Manager (ACM) service principal (acm.amazonaws.com).

Type annotations and code completion for boto3.client("acm-pca").delete_permission method. boto3 documentation

Method definition
def delete_permission(
    self,
    *,
    CertificateAuthorityArn: str,
    Principal: str,
    SourceAccount: str = ...,
) -> EmptyResponseMetadataTypeDef:  # (1)
    ...
  1. See EmptyResponseMetadataTypeDef
Usage example with kwargs
kwargs: DeletePermissionRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
    "Principal": ...,
}

parent.delete_permission(**kwargs)
  1. See DeletePermissionRequestRequestTypeDef

delete_policy

Deletes the resource-based policy attached to a private CA.

Type annotations and code completion for boto3.client("acm-pca").delete_policy method. boto3 documentation

Method definition
def delete_policy(
    self,
    *,
    ResourceArn: str,
) -> EmptyResponseMetadataTypeDef:  # (1)
    ...
  1. See EmptyResponseMetadataTypeDef
Usage example with kwargs
kwargs: DeletePolicyRequestRequestTypeDef = {  # (1)
    "ResourceArn": ...,
}

parent.delete_policy(**kwargs)
  1. See DeletePolicyRequestRequestTypeDef

describe_certificate_authority

Lists information about your private certificate authority (CA) or one that has been shared with you.

Type annotations and code completion for boto3.client("acm-pca").describe_certificate_authority method. boto3 documentation

Method definition
def describe_certificate_authority(
    self,
    *,
    CertificateAuthorityArn: str,
) -> DescribeCertificateAuthorityResponseTypeDef:  # (1)
    ...
  1. See DescribeCertificateAuthorityResponseTypeDef
Usage example with kwargs
kwargs: DescribeCertificateAuthorityRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
}

parent.describe_certificate_authority(**kwargs)
  1. See DescribeCertificateAuthorityRequestRequestTypeDef

describe_certificate_authority_audit_report

Lists information about a specific audit report created by calling the CreateCertificateAuthorityAuditReport_ action.

Type annotations and code completion for boto3.client("acm-pca").describe_certificate_authority_audit_report method. boto3 documentation

Method definition
def describe_certificate_authority_audit_report(
    self,
    *,
    CertificateAuthorityArn: str,
    AuditReportId: str,
) -> DescribeCertificateAuthorityAuditReportResponseTypeDef:  # (1)
    ...
  1. See DescribeCertificateAuthorityAuditReportResponseTypeDef
Usage example with kwargs
kwargs: DescribeCertificateAuthorityAuditReportRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
    "AuditReportId": ...,
}

parent.describe_certificate_authority_audit_report(**kwargs)
  1. See DescribeCertificateAuthorityAuditReportRequestRequestTypeDef

generate_presigned_url

Generate a presigned url given a client, its method, and arguments.

Type annotations and code completion for boto3.client("acm-pca").generate_presigned_url method. boto3 documentation

Method definition
def generate_presigned_url(
    self,
    ClientMethod: str,
    Params: Mapping[str, Any] = ...,
    ExpiresIn: int = 3600,
    HttpMethod: str = ...,
) -> str:
    ...

get_certificate

Retrieves a certificate from your private CA or one that has been shared with you.

Type annotations and code completion for boto3.client("acm-pca").get_certificate method. boto3 documentation

Method definition
def get_certificate(
    self,
    *,
    CertificateAuthorityArn: str,
    CertificateArn: str,
) -> GetCertificateResponseTypeDef:  # (1)
    ...
  1. See GetCertificateResponseTypeDef
Usage example with kwargs
kwargs: GetCertificateRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
    "CertificateArn": ...,
}

parent.get_certificate(**kwargs)
  1. See GetCertificateRequestRequestTypeDef

get_certificate_authority_certificate

Retrieves the certificate and certificate chain for your private certificate authority (CA) or one that has been shared with you.

Type annotations and code completion for boto3.client("acm-pca").get_certificate_authority_certificate method. boto3 documentation

Method definition
def get_certificate_authority_certificate(
    self,
    *,
    CertificateAuthorityArn: str,
) -> GetCertificateAuthorityCertificateResponseTypeDef:  # (1)
    ...
  1. See GetCertificateAuthorityCertificateResponseTypeDef
Usage example with kwargs
kwargs: GetCertificateAuthorityCertificateRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
}

parent.get_certificate_authority_certificate(**kwargs)
  1. See GetCertificateAuthorityCertificateRequestRequestTypeDef

get_certificate_authority_csr

Retrieves the certificate signing request (CSR) for your private certificate authority (CA).

Type annotations and code completion for boto3.client("acm-pca").get_certificate_authority_csr method. boto3 documentation

Method definition
def get_certificate_authority_csr(
    self,
    *,
    CertificateAuthorityArn: str,
) -> GetCertificateAuthorityCsrResponseTypeDef:  # (1)
    ...
  1. See GetCertificateAuthorityCsrResponseTypeDef
Usage example with kwargs
kwargs: GetCertificateAuthorityCsrRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
}

parent.get_certificate_authority_csr(**kwargs)
  1. See GetCertificateAuthorityCsrRequestRequestTypeDef

get_policy

Retrieves the resource-based policy attached to a private CA.

Type annotations and code completion for boto3.client("acm-pca").get_policy method. boto3 documentation

Method definition
def get_policy(
    self,
    *,
    ResourceArn: str,
) -> GetPolicyResponseTypeDef:  # (1)
    ...
  1. See GetPolicyResponseTypeDef
Usage example with kwargs
kwargs: GetPolicyRequestRequestTypeDef = {  # (1)
    "ResourceArn": ...,
}

parent.get_policy(**kwargs)
  1. See GetPolicyRequestRequestTypeDef

import_certificate_authority_certificate

Imports a signed private CA certificate into Amazon Web Services Private CA.

Type annotations and code completion for boto3.client("acm-pca").import_certificate_authority_certificate method. boto3 documentation

Method definition
def import_certificate_authority_certificate(
    self,
    *,
    CertificateAuthorityArn: str,
    Certificate: Union[str, bytes, IO[Any], StreamingBody],
    CertificateChain: Union[str, bytes, IO[Any], StreamingBody] = ...,
) -> EmptyResponseMetadataTypeDef:  # (1)
    ...
  1. See EmptyResponseMetadataTypeDef
Usage example with kwargs
kwargs: ImportCertificateAuthorityCertificateRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
    "Certificate": ...,
}

parent.import_certificate_authority_certificate(**kwargs)
  1. See ImportCertificateAuthorityCertificateRequestRequestTypeDef

issue_certificate

Uses your private certificate authority (CA), or one that has been shared with you, to issue a client certificate.

Type annotations and code completion for boto3.client("acm-pca").issue_certificate method. boto3 documentation

Method definition
def issue_certificate(
    self,
    *,
    CertificateAuthorityArn: str,
    Csr: Union[str, bytes, IO[Any], StreamingBody],
    SigningAlgorithm: SigningAlgorithmType,  # (1)
    Validity: ValidityTypeDef,  # (2)
    ApiPassthrough: ApiPassthroughTypeDef = ...,  # (3)
    TemplateArn: str = ...,
    ValidityNotBefore: ValidityTypeDef = ...,  # (2)
    IdempotencyToken: str = ...,
) -> IssueCertificateResponseTypeDef:  # (5)
    ...
  1. See SigningAlgorithmType
  2. See ValidityTypeDef
  3. See ApiPassthroughTypeDef
  4. See ValidityTypeDef
  5. See IssueCertificateResponseTypeDef
Usage example with kwargs
kwargs: IssueCertificateRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
    "Csr": ...,
    "SigningAlgorithm": ...,
    "Validity": ...,
}

parent.issue_certificate(**kwargs)
  1. See IssueCertificateRequestRequestTypeDef

list_certificate_authorities

Lists the private certificate authorities that you created by using the CreateCertificateAuthority_ action.

Type annotations and code completion for boto3.client("acm-pca").list_certificate_authorities method. boto3 documentation

Method definition
def list_certificate_authorities(
    self,
    *,
    NextToken: str = ...,
    MaxResults: int = ...,
    ResourceOwner: ResourceOwnerType = ...,  # (1)
) -> ListCertificateAuthoritiesResponseTypeDef:  # (2)
    ...
  1. See ResourceOwnerType
  2. See ListCertificateAuthoritiesResponseTypeDef
Usage example with kwargs
kwargs: ListCertificateAuthoritiesRequestRequestTypeDef = {  # (1)
    "NextToken": ...,
}

parent.list_certificate_authorities(**kwargs)
  1. See ListCertificateAuthoritiesRequestRequestTypeDef

list_permissions

List all permissions on a private CA, if any, granted to the Certificate Manager (ACM) service principal (acm.amazonaws.com).

Type annotations and code completion for boto3.client("acm-pca").list_permissions method. boto3 documentation

Method definition
def list_permissions(
    self,
    *,
    CertificateAuthorityArn: str,
    NextToken: str = ...,
    MaxResults: int = ...,
) -> ListPermissionsResponseTypeDef:  # (1)
    ...
  1. See ListPermissionsResponseTypeDef
Usage example with kwargs
kwargs: ListPermissionsRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
}

parent.list_permissions(**kwargs)
  1. See ListPermissionsRequestRequestTypeDef

list_tags

Lists the tags, if any, that are associated with your private CA or one that has been shared with you.

Type annotations and code completion for boto3.client("acm-pca").list_tags method. boto3 documentation

Method definition
def list_tags(
    self,
    *,
    CertificateAuthorityArn: str,
    NextToken: str = ...,
    MaxResults: int = ...,
) -> ListTagsResponseTypeDef:  # (1)
    ...
  1. See ListTagsResponseTypeDef
Usage example with kwargs
kwargs: ListTagsRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
}

parent.list_tags(**kwargs)
  1. See ListTagsRequestRequestTypeDef

put_policy

Attaches a resource-based policy to a private CA.

Type annotations and code completion for boto3.client("acm-pca").put_policy method. boto3 documentation

Method definition
def put_policy(
    self,
    *,
    ResourceArn: str,
    Policy: str,
) -> EmptyResponseMetadataTypeDef:  # (1)
    ...
  1. See EmptyResponseMetadataTypeDef
Usage example with kwargs
kwargs: PutPolicyRequestRequestTypeDef = {  # (1)
    "ResourceArn": ...,
    "Policy": ...,
}

parent.put_policy(**kwargs)
  1. See PutPolicyRequestRequestTypeDef

restore_certificate_authority

Restores a certificate authority (CA) that is in the DELETED state.

Type annotations and code completion for boto3.client("acm-pca").restore_certificate_authority method. boto3 documentation

Method definition
def restore_certificate_authority(
    self,
    *,
    CertificateAuthorityArn: str,
) -> EmptyResponseMetadataTypeDef:  # (1)
    ...
  1. See EmptyResponseMetadataTypeDef
Usage example with kwargs
kwargs: RestoreCertificateAuthorityRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
}

parent.restore_certificate_authority(**kwargs)
  1. See RestoreCertificateAuthorityRequestRequestTypeDef

revoke_certificate

Revokes a certificate that was issued inside Amazon Web Services Private CA.

Type annotations and code completion for boto3.client("acm-pca").revoke_certificate method. boto3 documentation

Method definition
def revoke_certificate(
    self,
    *,
    CertificateAuthorityArn: str,
    CertificateSerial: str,
    RevocationReason: RevocationReasonType,  # (1)
) -> EmptyResponseMetadataTypeDef:  # (2)
    ...
  1. See RevocationReasonType
  2. See EmptyResponseMetadataTypeDef
Usage example with kwargs
kwargs: RevokeCertificateRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
    "CertificateSerial": ...,
    "RevocationReason": ...,
}

parent.revoke_certificate(**kwargs)
  1. See RevokeCertificateRequestRequestTypeDef

tag_certificate_authority

Adds one or more tags to your private CA.

Type annotations and code completion for boto3.client("acm-pca").tag_certificate_authority method. boto3 documentation

Method definition
def tag_certificate_authority(
    self,
    *,
    CertificateAuthorityArn: str,
    Tags: Sequence[TagTypeDef],  # (1)
) -> EmptyResponseMetadataTypeDef:  # (2)
    ...
  1. See TagTypeDef
  2. See EmptyResponseMetadataTypeDef
Usage example with kwargs
kwargs: TagCertificateAuthorityRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
    "Tags": ...,
}

parent.tag_certificate_authority(**kwargs)
  1. See TagCertificateAuthorityRequestRequestTypeDef

untag_certificate_authority

Remove one or more tags from your private CA.

Type annotations and code completion for boto3.client("acm-pca").untag_certificate_authority method. boto3 documentation

Method definition
def untag_certificate_authority(
    self,
    *,
    CertificateAuthorityArn: str,
    Tags: Sequence[TagTypeDef],  # (1)
) -> EmptyResponseMetadataTypeDef:  # (2)
    ...
  1. See TagTypeDef
  2. See EmptyResponseMetadataTypeDef
Usage example with kwargs
kwargs: UntagCertificateAuthorityRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
    "Tags": ...,
}

parent.untag_certificate_authority(**kwargs)
  1. See UntagCertificateAuthorityRequestRequestTypeDef

update_certificate_authority

Updates the status or configuration of a private certificate authority (CA).

Type annotations and code completion for boto3.client("acm-pca").update_certificate_authority method. boto3 documentation

Method definition
def update_certificate_authority(
    self,
    *,
    CertificateAuthorityArn: str,
    RevocationConfiguration: RevocationConfigurationTypeDef = ...,  # (1)
    Status: CertificateAuthorityStatusType = ...,  # (2)
) -> EmptyResponseMetadataTypeDef:  # (3)
    ...
  1. See RevocationConfigurationTypeDef
  2. See CertificateAuthorityStatusType
  3. See EmptyResponseMetadataTypeDef
Usage example with kwargs
kwargs: UpdateCertificateAuthorityRequestRequestTypeDef = {  # (1)
    "CertificateAuthorityArn": ...,
}

parent.update_certificate_authority(**kwargs)
  1. See UpdateCertificateAuthorityRequestRequestTypeDef

get_paginator

Type annotations and code completion for boto3.client("acm-pca").get_paginator method with overloads.

get_waiter

Type annotations and code completion for boto3.client("acm-pca").get_waiter method with overloads.