AWS Certificate Manager Private Certificate Authority

AWS Certificate Manager Private Certificate Authority (ACM PCA) is a managed private CA service with which you can easily and security manage your CA infrastructure and your private certificates.

How ACM PCA Differs for AWS GovCloud (US)

This service has no differences between the AWS GovCloud (US) and the standard AWS Regions.

Documentation for ACM PCA

AWS Certificate Manager Private Certificate Authority documentation.

ITAR Boundary

AWS GovCloud (US) has an ITAR boundary, which defines where customers are allowed to store ITAR-controlled data for this service in the AWS GovCloud (US) Region. To maintain ITAR compliance, you must place ITAR-controlled data on the applicable part of the ITAR boundary. If you do not have any ITAR-controlled data in the AWS GovCloud (US) Region, this section does not apply to you. The following information identifies the ITAR boundary for this service:

ITAR-Regulated Data Permitted	ITAR-Regulated Data Not Permitted
This service boundary exists entirely within the GovCloud regions and all export-controlled Content entered, processed, and created within Service will exist in the GovCloud regions.	No ITAR-regulated data may be entered, stored, or processed by AWS Certificate Manager Private Certificate Authority. For example, domain names specified for certificates are not permitted to contain ITAR-regulated data. For example, do not enter ITAR-regulated data into the DomainName or SubjectAlternativeNames fields when requesting a certificate.