Skip to content

api-evangelist/amazon-private-ca

BranchesTags

Repository files navigation

Amazon Private CA

AWS Private Certificate Authority (AWS Private CA) is a highly available, fully managed private CA service that helps you easily and securely manage the lifecycle of your private certificates. It allows you to create private CA hierarchies and issue X.509 certificates for your internal resources including TLS certificates for microservices, IoT devices, and user authentication.

URL: Visit APIs.json URL

Run: Capabilities Using Naftiko

Tags:

  • AWS, Certificate Authority, Certificates, PKI, Security, X.509, TLS, IoT

Timestamps

  • Created: 2026-03-16
  • Modified: 2026-04-19

APIs

AWS Private CA API

The AWS Private CA API provides programmatic access to create and manage private certificate authorities, issue X.509 certificates, manage certificate revocation lists, configure audit reports, and control permissions and policies for private PKI infrastructure.

Human URL: https://aws.amazon.com/private-ca/

Tags:

  • Certificates, PKI, Security, Certificate Authority, X.509

Properties

Common Properties

Features

Name Description
Private CA Hierarchy Create root and subordinate CA hierarchies for complete control over your PKI infrastructure.
X.509 Certificate Issuance Issue end-entity and CA certificates signed by your private CAs for internal resources.
Certificate Revocation Revoke compromised or expired certificates with CRL and OCSP support.
Audit Reports Generate detailed audit reports of all certificate issuance activity stored in S3.
Short-Lived Certificates Issue short-lived certificates to reduce revocation overhead and improve security posture.
Custom Templates Use certificate templates to standardize certificate extensions and constraints.
IAM Integration Control access to CA operations using fine-grained IAM policies and resource-based policies.
High Availability Fully managed, highly available service with automatic failover across AWS Availability Zones.

Use Cases

Name Description
TLS for Internal Services Issue TLS certificates for microservices, APIs, and internal web applications.
IoT Device Authentication Provision unique X.509 certificates to IoT devices for mutual TLS authentication.
User and Workload Identity Issue certificates for user authentication and workload identity in zero-trust architectures.
Code Signing Sign software artifacts and container images with private CA-issued certificates.
VPN and Network Security Issue certificates for VPN clients and network devices for mutual authentication.

Integrations

Name Description
AWS Certificate Manager Integrate Private CA with ACM to manage and deploy certificates on AWS services.
AWS IoT Core Use Private CA to provision certificates for IoT devices connecting to AWS IoT Core.
Kubernetes Integrate with cert-manager for automated certificate provisioning in Kubernetes clusters.
Amazon EKS Issue certificates for service mesh and pod-to-pod TLS in EKS clusters.
AWS Secrets Manager Store and rotate private keys associated with issued certificates.

Artifacts

Machine-readable API specifications organized by format.

OpenAPI

JSON Schema

JSON Structure

JSON-LD

Examples

Capabilities

Naftiko capabilities organized as shared per-API definitions composed into customer-facing workflows.

Shared Per-API Definitions

Workflow Capabilities

Vocabulary

Rules

Maintainers

FN: Kin Lane

Email: kin@apievangelist.com

About

AWS Private Certificate Authority (AWS Private CA) is a highly available, fully managed private CA service that helps you easily and securely manage the lifecycle of your private certificates.

Topics

apis-jsonawscertificate-authoritycertificatesiotnaftikopkisecuritytlsx-509

Resources

Readme
Activity
Custom properties

Stars

0 stars

Watchers

0 watching

Forks

0 forks
Report repository

Releases

Packages

Contributors