---
type: resource-type
title: CertificateAuthority
description: aws resource type AWS::ACMPCA::CertificateAuthority
name: CertificateAuthority
lexicon: aws
resource_type: AWS::ACMPCA::CertificateAuthority
---
`AWS::ACMPCA::CertificateAuthority`, a resource type of the aws lexicon.

## Properties

- `KeyAlgorithm` (`string`, required): Public key algorithm and size, in bits, of the key pair that your CA creates when it issues a certificate.
- `SigningAlgorithm` (`string`, required): Algorithm your CA uses to sign certificate requests.
- `Subject` (`CertificateAuthority_Subject`, required): Structure that contains X.500 distinguished name information for your CA.
- `Type` (`string`, required): The type of the certificate authority.
- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the certificate authority.
- `CertificateSigningRequest` (`string`, optional): The base64 PEM-encoded certificate signing request (CSR) for your certificate authority certificate.
- `CsrExtensions` (`CertificateAuthority_CsrExtensions`, optional): Structure that contains CSR pass through extension information used by the CreateCertificateAuthority action.
- `KeyStorageSecurityStandard` (`string`, optional): KeyStorageSecurityStadard defines a cryptographic key management compliance standard used for handling CA keys.
- `RevocationConfiguration` (`CertificateAuthority_RevocationConfiguration`, optional): Certificate revocation information used by the CreateCertificateAuthority and UpdateCertificateAuthority actions.
- `Tags` (`CertificateAuthority_Tag[]`, optional)
- `UsageMode` (`string`, optional): Usage mode of the ceritificate authority.

## Attributes

- `Arn`
- `CertificateSigningRequest`