The path and file name of a JSON-formatted IAM policy to attach to the specified
private CA resource. If this policy does not contain all required statements or if it
includes any statement that is not allowed, the
PutPolicy action returns an
InvalidPolicyException. For information about IAM policy and
statement structure, see Overview of JSON Policies.
The Amazon Resource Number (ARN) of the private CA to associate with the policy. The ARN of the CA can be found by calling the ListCertificateAuthorities action.