---
id: aws-cdk-aws-acmpca
version: "1.204.0"
license: Apache-2.0
license_treatment: permissive
maintenance: active
---

# aws-cdk.aws-acmpca — The CDK Construct Library for AWS::ACMPCA

License: permissive · Maintenance: active · Downloads: 137.9K/mo

## What it is and what it does

This is an AWS CDK v1 construct library for AWS Certificate Manager Private CA (ACMPCA). It provides Python bindings to define and manage private certificate authorities in AWS infrastructure-as-code. The package includes high-level `CertificateAuthority` classes for importing existing authorities by ARN, and low-level `Cfn*` classes that map directly to CloudFormation resources for creating new certificate authorities with full control over key algorithms, signing algorithms, and certificate subject properties.

The package depends on aws-cdk.core, constructs, jsii, publication, and typeguard. However, AWS CDK v1 reached end-of-support on 2023-06-01 and is no longer receiving updates. Users building new infrastructure should migrate to AWS CDK v2 rather than start new projects with this package.

Use it for:

- Import an existing private certificate authority into a CDK stack to reference it in other constructs
- Define a new private root or subordinate certificate authority using low-level CloudFormation constructs
- Configure certificate authority subject properties (country, organization, common name, etc.) in infrastructure code
- Integrate ACMPCA resources with other AWS services managed via CDK v1

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Provides AWS CDK constructs for working with AWS Certificate Manager Private CA (ACMPCA), allowing you to import and reference existing certificate authorities and create new ones using low-level CloudFormation classes.

No for new projects. This is AWS CDK v1, which reached end-of-support on 2023-06-01 and is no longer maintained. If you are already on CDK v1 and need ACMPCA support, it is available and has no known vulnerabilities, but you should plan migration to CDK v2. Do not start new CDK projects with v1.

## Install

pip install aws-cdk-aws-acmpca
uv add aws-cdk-aws-acmpca
poetry add aws-cdk-aws-acmpca

## Installing aws-cdk.aws-acmpca

Before you install: Low install friction with stable dependencies. However, this is an AWS CDK v1 package that reached end-of-support on 2023-06-01 and is no longer being updated—users should migrate to AWS CDK v2 instead.

License in practice: Licensed under Apache-2.0 (permissive), allowing commercial and private use with minimal restrictions.

Quickstart:

pip install aws-cdk.aws-acmpca

import aws_cdk.aws_acmpca as acmpca

certificate_authority = acmpca.CertificateAuthority.from_certificate_authority_arn(
    self, "CA", "arn:aws:acm-pca:us-east-1:123456789012:certificate-authority/..."
)

Requires AWS CDK v1 core library; AWS CDK v1 is end-of-support as of 2023-06-01 and migration to v2 is recommended.

Verify before relying:

- Whether v2 equivalents of this package's functionality are available and what migration path is recommended
- Current adoption and community support status given the end-of-support date

## Package facts

- License: Apache-2.0 (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 137.9K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

aws certificate authority cdk, acmpca construct library, aws private ca infrastructure, cdk certificate management, cloudformation certificate authority, aws-infrastructure, end-of-support, certificate-authority

[View on SkillFed](https://skillfed.io/packages/aws-cdk-aws-acmpca) · [View on PyPI](https://pypi.org/project/aws-cdk-aws-acmpca/)