---
title: "POST /api/v1/cert-manager/ca/aws-pca"
method: POST
path: "/api/v1/cert-manager/ca/aws-pca"
tags: ["PKI Certificate Authorities"]
---

# POST /api/v1/cert-manager/ca/aws-pca

`POST /api/v1/cert-manager/ca/aws-pca`

## Request body

- object
  - `name` string, required — The name of the AWS Private Certificate Authority Certificate Authority to create. Must be slug-friendly.
  - `status` 'active' | 'disabled' | 'pending-certificate', required — The status of the AWS Private Certificate Authority Certificate Authority.
  - `configuration` object, required
    - `appConnectionId` string, uuid, required — The ID of the AWS App Connection to use for authenticating with AWS Private Certificate Authority (PCA). This connection must have permissions to issue, get, and revoke certificates from the specified PCA.
    - `certificateAuthorityArn` string, required — The ARN of the AWS Private Certificate Authority to use for issuing certificates.
    - `region` 'us-east-1' | 'us-east-2' | 'us-west-1' | 'us-west-2' | 'us-gov-east-1' | 'us-gov-west-1' | 'af-south-1' | 'ap-east-1' | 'ap-south-1' | 'ap-south-2' | 'ap-northeast-1' | 'ap-northeast-2' | 'ap-northeast-3' | 'ap-southeast-1' | 'ap-southeast-2' | 'ap-southeast-3' | 'ap-southeast-4' | 'ca-central-1' | 'eu-central-1' | 'eu-central-2' | 'eu-west-1' | 'eu-west-2' | 'eu-west-3' | 'eu-south-1' | 'eu-south-2' | 'eu-north-1' | 'me-south-1' | 'me-central-1' | 'sa-east-1', required — The AWS region where the Private Certificate Authority is located.

## Response `200`

Default Response

- object
  - `enableDirectIssuance` boolean
  - `name` string, required
  - `id` string, uuid, required
  - `status` 'active' | 'disabled' | 'pending-certificate', required
  - `type` 'aws-pca', required
  - `configuration` object, required
    - `appConnectionId` string, uuid, required — The ID of the AWS App Connection to use for authenticating with AWS Private Certificate Authority (PCA). This connection must have permissions to issue, get, and revoke certificates from the specified PCA.
    - `certificateAuthorityArn` string, required — The ARN of the AWS Private Certificate Authority to use for issuing certificates.
    - `region` 'us-east-1' | 'us-east-2' | 'us-west-1' | 'us-west-2' | 'us-gov-east-1' | 'us-gov-west-1' | 'af-south-1' | 'ap-east-1' | 'ap-south-1' | 'ap-south-2' | 'ap-northeast-1' | 'ap-northeast-2' | 'ap-northeast-3' | 'ap-southeast-1' | 'ap-southeast-2' | 'ap-southeast-3' | 'ap-southeast-4' | 'ca-central-1' | 'eu-central-1' | 'eu-central-2' | 'eu-west-1' | 'eu-west-2' | 'eu-west-3' | 'eu-south-1' | 'eu-south-2' | 'eu-north-1' | 'me-south-1' | 'me-central-1' | 'sa-east-1', required — The AWS region where the Private Certificate Authority is located.

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/revisions/885aef3e6c11/schema)