AWS Private Certificate Authority endpoints and quotas - AWS General Reference

AWS Private Certificate Authority endpoints and quotas

The following are the service endpoints and service quotas for this service. To connect programmatically to an AWS service, you use an endpoint. In addition to the standard AWS endpoints, some AWS services offer FIPS endpoints in selected Regions. For more information, see AWS service endpoints. Service quotas, also referred to as limits, are the maximum number of service resources or operations for your AWS account. For more information, see AWS service quotas.

Service endpoints

Region Name Region Endpoint Protocol
US East (Ohio) us-east-2

acm-pca.us-east-2.amazonaws.com

acm-pca-fips.us-east-2.amazonaws.com

HTTPS

HTTPS

US East (N. Virginia) us-east-1

acm-pca.us-east-1.amazonaws.com

acm-pca-fips.us-east-1.amazonaws.com

HTTPS

HTTPS

US West (N. California) us-west-1

acm-pca.us-west-1.amazonaws.com

acm-pca-fips.us-west-1.amazonaws.com

HTTPS

HTTPS

US West (Oregon) us-west-2

acm-pca.us-west-2.amazonaws.com

acm-pca-fips.us-west-2.amazonaws.com

HTTPS

HTTPS

Africa (Cape Town) af-south-1 acm-pca.af-south-1.amazonaws.com HTTPS
Asia Pacific (Hong Kong) ap-east-1 acm-pca.ap-east-1.amazonaws.com HTTPS
Asia Pacific (Jakarta) ap-southeast-3 acm-pca.ap-southeast-3.amazonaws.com HTTPS
Asia Pacific (Mumbai) ap-south-1 acm-pca.ap-south-1.amazonaws.com HTTPS
Asia Pacific (Osaka) ap-northeast-3 acm-pca.ap-northeast-3.amazonaws.com HTTPS
Asia Pacific (Seoul) ap-northeast-2 acm-pca.ap-northeast-2.amazonaws.com HTTPS
Asia Pacific (Singapore) ap-southeast-1 acm-pca.ap-southeast-1.amazonaws.com HTTPS
Asia Pacific (Sydney) ap-southeast-2 acm-pca.ap-southeast-2.amazonaws.com HTTPS
Asia Pacific (Tokyo) ap-northeast-1 acm-pca.ap-northeast-1.amazonaws.com HTTPS
Canada (Central) ca-central-1

acm-pca.ca-central-1.amazonaws.com

acm-pca-fips.ca-central-1.amazonaws.com

HTTPS

HTTPS

Europe (Frankfurt) eu-central-1 acm-pca.eu-central-1.amazonaws.com HTTPS
Europe (Ireland) eu-west-1 acm-pca.eu-west-1.amazonaws.com HTTPS
Europe (London) eu-west-2 acm-pca.eu-west-2.amazonaws.com HTTPS
Europe (Milan) eu-south-1 acm-pca.eu-south-1.amazonaws.com HTTPS
Europe (Paris) eu-west-3 acm-pca.eu-west-3.amazonaws.com HTTPS
Europe (Stockholm) eu-north-1 acm-pca.eu-north-1.amazonaws.com HTTPS
Middle East (Bahrain) me-south-1 acm-pca.me-south-1.amazonaws.com HTTPS
South America (São Paulo) sa-east-1 acm-pca.sa-east-1.amazonaws.com HTTPS
AWS GovCloud (US-East) us-gov-east-1

acm-pca.us-gov-east-1.amazonaws.com

acm-pca.us-gov-east-1.amazonaws.com

HTTPS

HTTPS

AWS GovCloud (US-West) us-gov-west-1

acm-pca.us-gov-west-1.amazonaws.com

acm-pca.us-gov-west-1.amazonaws.com

HTTPS

HTTPS

Service quotas

Name Default Adjustable Description
Number of private certificate authorities (CAs) Each supported Region: 200 Yes The maximum number of private certificate authorities (CAs) that you can create in this account in the current Region.
Number of private certificates per CA Each supported Region: 1,000,000 Yes The maximum number of private certificates per certificate authority (CA) that you can create in this account in the current Region.
Number of revoked private certificates per CA Each supported Region: 1,000,000 No The maximum number of private certificates per certificate authority (CA) that you can revoke in this account in the current Region.
Rate of CreateCertificateAuthority requests Each supported Region: 1 No The maximum number of CreateCertificateAuthority requests that you can perform in this account in the current region per second.
Rate of CreateCertificateAuthorityAuditReport requests Each supported Region: 1 No The maximum number of CreateCertificateAuthorityAuditReport requests that you can perform in this account in the current region per second.
Rate of CreatePermission requests Each supported Region: 1 No The maximum number of CreatePermission requests that you can perform in this account in the current region per second.
Rate of DeleteCertificateAuthority requests Each supported Region: 10 No The maximum number of DeleteCertificateAuthority requests that you can perform in this account in the current region per second.
Rate of DeletePermission requests Each supported Region: 1 No The maximum number of DeletePermission requests that you can perform in this account in the current region per second.
Rate of DeletePolicy requests Each supported Region: 5 No The maximum number of DeletePolicy requests that you can perform in this account in the current region per second.
Rate of DescribeCertificateAuthority requests Each supported Region: 20 No The maximum number of DescribeCertificateAuthority requests that you can perform in this account in the current region per second.
Rate of DescribeCertificateAuthorityAuditReport requests Each supported Region: 20 No The maximum number of DescribeCertificateAuthorityAuditReport requests that you can perform in this account in the current region per second.
Rate of GetCertificate requests Each supported Region: 75 Yes The maximum number of GetCertificate requests that you can perform in this account in the current region per second.
Rate of GetCertificateAuthorityCertificate requests Each supported Region: 20 No The maximum number of GetCertificateAuthorityCertificate requests that you can perform in this account in the current region per second.
Rate of GetCertificateAuthorityCsr requests Each supported Region: 10 No The maximum number of GetCertificateAuthorityCsr requests that you can perform in this account in the current region per second.
Rate of GetPolicy requests Each supported Region: 5 No The maximum number of GetPolicy requests that you can perform in this account in the current region per second.
Rate of ImportCertificateAuthorityCertificate requests Each supported Region: 10 No The maximum number of ImportCertificateAuthorityCertificate requests that you can perform in this account in the current region per second.
Rate of IssueCertificate requests Each supported Region: 25 Yes The maximum number of IssueCertificate requests that you can perform in this account in the current region per second.
Rate of ListCertificateAuthorities requests Each supported Region: 20 No The maximum number of ListCertificateAuthorities requests that you can perform in this account in the current region per second.
Rate of ListPermissions requests Each supported Region: 5 No The maximum number of ListPermissions requests that you can perform in this account in the current region per second.
Rate of ListTags requests Each supported Region: 20 No The maximum number of ListTags requests that you can perform in this account in the current region per second.
Rate of PutPolicy requests Each supported Region: 5 No The maximum number of PutPolicy requests that you can perform in this account in the current region per second.
Rate of RestoreCertificateAuthority requests Each supported Region: 20 No The maximum number of RestoreCertificateAuthority requests that you can perform in this account in the current region per second.
Rate of RevokeCertificate requests Each supported Region: 20 No The maximum number of RevokeCertificate requests that you can perform in this account in the current region per second.
Rate of TagCertificateAuthority requests Each supported Region: 10 No The maximum number of TagCertificateAuthority requests that you can perform in this account in the current region per second.
Rate of UntagCertificateAuthority requests Each supported Region: 10 No The maximum number of UntagCertificateAuthority requests that you can perform in this account in the current region per second.
Rate of UpdateCertificateAuthority requests Each supported Region: 10 No The maximum number of UpdateCertificateAuthority requests that you can perform in this account in the current region per second.