AWS::ACMPCA::CertificateAuthority CsrExtensions - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::ACMPCA::CertificateAuthority CsrExtensions

Describes the certificate extensions to be added to the certificate signing request (CSR).


To declare this entity in your Amazon CloudFormation template, use the following syntax:



Indicates the purpose of the certificate and of the key contained in the certificate.

Required: No

Type: KeyUsage

Update requires: Replacement


For CA certificates, provides a path to additional information pertaining to the CA, such as revocation and policy. For more information, see Subject Information Access in RFC 5280.

Required: No

Type: Array of AccessDescription

Update requires: Replacement