---
title: "PATCH /api/v1/cert-manager/ca/aws-pca/{id}"
method: PATCH
path: "/api/v1/cert-manager/ca/aws-pca/{id}"
tags: ["PKI Certificate Authorities"]
---

# PATCH /api/v1/cert-manager/ca/aws-pca/{id}

`PATCH /api/v1/cert-manager/ca/aws-pca/{id}`

## Path parameters

- `id` string, required

## Request body

- object
  - `name` string — The updated name of the AWS Private Certificate Authority Certificate Authority. Must be slug-friendly.
  - `status` 'active' | 'disabled' | 'pending-certificate' — The updated status of the AWS Private Certificate Authority Certificate Authority.
  - `configuration` object
    - `appConnectionId` string, uuid, required — The ID of the AWS App Connection to use for authenticating with AWS Private Certificate Authority (PCA). This connection must have permissions to issue, get, and revoke certificates from the specified PCA.
    - `certificateAuthorityArn` string, required — The ARN of the AWS Private Certificate Authority to use for issuing certificates.
    - `region` 'us-east-1' | 'us-east-2' | 'us-west-1' | 'us-west-2' | 'us-gov-east-1' | 'us-gov-west-1' | 'af-south-1' | 'ap-east-1' | 'ap-south-1' | 'ap-south-2' | 'ap-northeast-1' | 'ap-northeast-2' | 'ap-northeast-3' | 'ap-southeast-1' | 'ap-southeast-2' | 'ap-southeast-3' | 'ap-southeast-4' | 'ca-central-1' | 'eu-central-1' | 'eu-central-2' | 'eu-west-1' | 'eu-west-2' | 'eu-west-3' | 'eu-south-1' | 'eu-south-2' | 'eu-north-1' | 'me-south-1' | 'me-central-1' | 'sa-east-1', required — The AWS region where the Private Certificate Authority is located.

## Response `200`

Default Response

- object
  - `enableDirectIssuance` boolean
  - `name` string, required
  - `id` string, uuid, required
  - `status` 'active' | 'disabled' | 'pending-certificate', required
  - `type` 'aws-pca', required
  - `configuration` object, required
    - `appConnectionId` string, uuid, required — The ID of the AWS App Connection to use for authenticating with AWS Private Certificate Authority (PCA). This connection must have permissions to issue, get, and revoke certificates from the specified PCA.
    - `certificateAuthorityArn` string, required — The ARN of the AWS Private Certificate Authority to use for issuing certificates.
    - `region` 'us-east-1' | 'us-east-2' | 'us-west-1' | 'us-west-2' | 'us-gov-east-1' | 'us-gov-west-1' | 'af-south-1' | 'ap-east-1' | 'ap-south-1' | 'ap-south-2' | 'ap-northeast-1' | 'ap-northeast-2' | 'ap-northeast-3' | 'ap-southeast-1' | 'ap-southeast-2' | 'ap-southeast-3' | 'ap-southeast-4' | 'ca-central-1' | 'eu-central-1' | 'eu-central-2' | 'eu-west-1' | 'eu-west-2' | 'eu-west-3' | 'eu-south-1' | 'eu-south-2' | 'eu-north-1' | 'me-south-1' | 'me-central-1' | 'sa-east-1', required — The AWS region where the Private Certificate Authority is located.

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/versions/f10a4f8c1d41/schema)