---
type: resource-type
title: ACMPCAPermission
description: aws resource type AWS::ACMPCA::Permission
name: ACMPCAPermission
lexicon: aws
resource_type: AWS::ACMPCA::Permission
---
`AWS::ACMPCA::Permission`, a resource type of the aws lexicon.

## Properties

- `Actions` (`string[]`, required): The actions that the specified AWS service principal can use. Actions IssueCertificate, GetCertificate and ListPermissions must be provided.
- `CertificateAuthorityArn` (`string`, required): The Amazon Resource Name (ARN) of the Private Certificate Authority that grants the permission.
- `Principal` (`string`, required): The AWS service or identity that receives the permission. At this time, the only valid principal is acm.amazonaws.com.
- `SourceAccount` (`string`, optional): The ID of the calling account.