Policy: AWSCertificateManagerPrivateCAFullAccess ARN: arn:aws:iam::aws:policy/AWSCertificateManagerPrivateCAFullAccess Allowed Actions Actions Services acm-pca:* acm-pca