naftiko: 1.0.0-alpha2
info:
  label: AWS Certificate Manager Private Certificate Authority
  description: 'AWS Certificate Manager Private Certificate Authority. 23 operations. Lead operation: Amazon Private CA Create
    Certificate Authority. Self-contained Naftiko capability covering one Amazon Private Ca business surface.'
  tags:
  - Amazon Private Ca
  - AWS Certificate Manager Private Certificate Authority
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    AMAZON_PRIVATE_CA_API_KEY: AMAZON_PRIVATE_CA_API_KEY
capability:
  consumes:
  - type: http
    namespace: amazon-private-ca
    baseUri: http://acm-pca.{region}.amazonaws.com
    description: AWS Certificate Manager Private Certificate Authority business capability. Self-contained, no shared references.
    resources:
    - name: '#X-Amz-Target=ACMPrivateCA.CreateCertificateAuthority'
      path: /#X-Amz-Target=ACMPrivateCA.CreateCertificateAuthority
      operations:
      - name: createcertificateauthority
        method: POST
        description: Amazon Private CA Create Certificate Authority
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.CreateCertificateAuthorityAuditReport'
      path: /#X-Amz-Target=ACMPrivateCA.CreateCertificateAuthorityAuditReport
      operations:
      - name: createcertificateauthorityauditreport
        method: POST
        description: Amazon Private CA Create Certificate Authority Audit Report
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.CreatePermission'
      path: /#X-Amz-Target=ACMPrivateCA.CreatePermission
      operations:
      - name: createpermission
        method: POST
        description: Amazon Private CA Create Permission
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.DeleteCertificateAuthority'
      path: /#X-Amz-Target=ACMPrivateCA.DeleteCertificateAuthority
      operations:
      - name: deletecertificateauthority
        method: POST
        description: Amazon Private CA Delete Certificate Authority
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.DeletePermission'
      path: /#X-Amz-Target=ACMPrivateCA.DeletePermission
      operations:
      - name: deletepermission
        method: POST
        description: Amazon Private CA Delete Permission
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.DeletePolicy'
      path: /#X-Amz-Target=ACMPrivateCA.DeletePolicy
      operations:
      - name: deletepolicy
        method: POST
        description: Amazon Private CA Delete Policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.DescribeCertificateAuthority'
      path: /#X-Amz-Target=ACMPrivateCA.DescribeCertificateAuthority
      operations:
      - name: describecertificateauthority
        method: POST
        description: Amazon Private CA Describe Certificate Authority
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.DescribeCertificateAuthorityAuditReport'
      path: /#X-Amz-Target=ACMPrivateCA.DescribeCertificateAuthorityAuditReport
      operations:
      - name: describecertificateauthorityauditreport
        method: POST
        description: Amazon Private CA Describe Certificate Authority Audit Report
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.GetCertificate'
      path: /#X-Amz-Target=ACMPrivateCA.GetCertificate
      operations:
      - name: getcertificate
        method: POST
        description: Amazon Private CA Get Certificate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.GetCertificateAuthorityCertificate'
      path: /#X-Amz-Target=ACMPrivateCA.GetCertificateAuthorityCertificate
      operations:
      - name: getcertificateauthoritycertificate
        method: POST
        description: Amazon Private CA Get Certificate Authority Certificate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.GetCertificateAuthorityCsr'
      path: /#X-Amz-Target=ACMPrivateCA.GetCertificateAuthorityCsr
      operations:
      - name: getcertificateauthoritycsr
        method: POST
        description: Amazon Private CA Get Certificate Authority Csr
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.GetPolicy'
      path: /#X-Amz-Target=ACMPrivateCA.GetPolicy
      operations:
      - name: getpolicy
        method: POST
        description: Amazon Private CA Get Policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.ImportCertificateAuthorityCertificate'
      path: /#X-Amz-Target=ACMPrivateCA.ImportCertificateAuthorityCertificate
      operations:
      - name: importcertificateauthoritycertificate
        method: POST
        description: Amazon Private CA Import Certificate Authority Certificate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.IssueCertificate'
      path: /#X-Amz-Target=ACMPrivateCA.IssueCertificate
      operations:
      - name: issuecertificate
        method: POST
        description: Amazon Private CA Issue Certificate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.ListCertificateAuthorities'
      path: /#X-Amz-Target=ACMPrivateCA.ListCertificateAuthorities
      operations:
      - name: listcertificateauthorities
        method: POST
        description: Amazon Private CA List Certificate Authorities
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: MaxResults
          in: query
          type: string
          description: Pagination limit
        - name: NextToken
          in: query
          type: string
          description: Pagination token
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.ListPermissions'
      path: /#X-Amz-Target=ACMPrivateCA.ListPermissions
      operations:
      - name: listpermissions
        method: POST
        description: Amazon Private CA List Permissions
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: MaxResults
          in: query
          type: string
          description: Pagination limit
        - name: NextToken
          in: query
          type: string
          description: Pagination token
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.ListTags'
      path: /#X-Amz-Target=ACMPrivateCA.ListTags
      operations:
      - name: listtags
        method: POST
        description: Amazon Private CA List Tags
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: MaxResults
          in: query
          type: string
          description: Pagination limit
        - name: NextToken
          in: query
          type: string
          description: Pagination token
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.PutPolicy'
      path: /#X-Amz-Target=ACMPrivateCA.PutPolicy
      operations:
      - name: putpolicy
        method: POST
        description: Amazon Private CA Put Policy
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.RestoreCertificateAuthority'
      path: /#X-Amz-Target=ACMPrivateCA.RestoreCertificateAuthority
      operations:
      - name: restorecertificateauthority
        method: POST
        description: Amazon Private CA Restore Certificate Authority
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.RevokeCertificate'
      path: /#X-Amz-Target=ACMPrivateCA.RevokeCertificate
      operations:
      - name: revokecertificate
        method: POST
        description: Amazon Private CA Revoke Certificate
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.TagCertificateAuthority'
      path: /#X-Amz-Target=ACMPrivateCA.TagCertificateAuthority
      operations:
      - name: tagcertificateauthority
        method: POST
        description: Amazon Private CA Tag Certificate Authority
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.UntagCertificateAuthority'
      path: /#X-Amz-Target=ACMPrivateCA.UntagCertificateAuthority
      operations:
      - name: untagcertificateauthority
        method: POST
        description: Amazon Private CA Untag Certificate Authority
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: '#X-Amz-Target=ACMPrivateCA.UpdateCertificateAuthority'
      path: /#X-Amz-Target=ACMPrivateCA.UpdateCertificateAuthority
      operations:
      - name: updatecertificateauthority
        method: POST
        description: Amazon Private CA Update Certificate Authority
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: X-Amz-Target
          in: header
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    authentication:
      type: apikey
      key: Authorization
      value: '{{env.AMAZON_PRIVATE_CA_API_KEY}}'
      placement: header
  exposes:
  - type: rest
    namespace: amazon-private-ca-rest
    port: 8080
    description: REST adapter for AWS Certificate Manager Private Certificate Authority. One Spectral-compliant resource per
      consumed operation, prefixed with /v1.
    resources:
    - path: /v1/x-amz-target-acmprivateca-createcertificateauthority
      name: x-amz-target-acmprivateca-createcertificateauthority
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.CreateCertificateAuthority.'
      operations:
      - method: POST
        name: createcertificateauthority
        description: Amazon Private CA Create Certificate Authority
        call: amazon-private-ca.createcertificateauthority
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-createcertificateauthorityauditreport
      name: x-amz-target-acmprivateca-createcertificateauthorityauditreport
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.CreateCertificateAuthorityAuditReport.'
      operations:
      - method: POST
        name: createcertificateauthorityauditreport
        description: Amazon Private CA Create Certificate Authority Audit Report
        call: amazon-private-ca.createcertificateauthorityauditreport
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-createpermission
      name: x-amz-target-acmprivateca-createpermission
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.CreatePermission.'
      operations:
      - method: POST
        name: createpermission
        description: Amazon Private CA Create Permission
        call: amazon-private-ca.createpermission
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-deletecertificateauthority
      name: x-amz-target-acmprivateca-deletecertificateauthority
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.DeleteCertificateAuthority.'
      operations:
      - method: POST
        name: deletecertificateauthority
        description: Amazon Private CA Delete Certificate Authority
        call: amazon-private-ca.deletecertificateauthority
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-deletepermission
      name: x-amz-target-acmprivateca-deletepermission
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.DeletePermission.'
      operations:
      - method: POST
        name: deletepermission
        description: Amazon Private CA Delete Permission
        call: amazon-private-ca.deletepermission
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-deletepolicy
      name: x-amz-target-acmprivateca-deletepolicy
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.DeletePolicy.'
      operations:
      - method: POST
        name: deletepolicy
        description: Amazon Private CA Delete Policy
        call: amazon-private-ca.deletepolicy
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-describecertificateauthority
      name: x-amz-target-acmprivateca-describecertificateauthority
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.DescribeCertificateAuthority.'
      operations:
      - method: POST
        name: describecertificateauthority
        description: Amazon Private CA Describe Certificate Authority
        call: amazon-private-ca.describecertificateauthority
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-describecertificateauthorityauditreport
      name: x-amz-target-acmprivateca-describecertificateauthorityauditreport
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.DescribeCertificateAuthorityAuditReport.'
      operations:
      - method: POST
        name: describecertificateauthorityauditreport
        description: Amazon Private CA Describe Certificate Authority Audit Report
        call: amazon-private-ca.describecertificateauthorityauditreport
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-getcertificate
      name: x-amz-target-acmprivateca-getcertificate
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.GetCertificate.'
      operations:
      - method: POST
        name: getcertificate
        description: Amazon Private CA Get Certificate
        call: amazon-private-ca.getcertificate
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-getcertificateauthoritycertificate
      name: x-amz-target-acmprivateca-getcertificateauthoritycertificate
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.GetCertificateAuthorityCertificate.'
      operations:
      - method: POST
        name: getcertificateauthoritycertificate
        description: Amazon Private CA Get Certificate Authority Certificate
        call: amazon-private-ca.getcertificateauthoritycertificate
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-getcertificateauthoritycsr
      name: x-amz-target-acmprivateca-getcertificateauthoritycsr
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.GetCertificateAuthorityCsr.'
      operations:
      - method: POST
        name: getcertificateauthoritycsr
        description: Amazon Private CA Get Certificate Authority Csr
        call: amazon-private-ca.getcertificateauthoritycsr
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-getpolicy
      name: x-amz-target-acmprivateca-getpolicy
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.GetPolicy.'
      operations:
      - method: POST
        name: getpolicy
        description: Amazon Private CA Get Policy
        call: amazon-private-ca.getpolicy
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-importcertificateauthoritycertificate
      name: x-amz-target-acmprivateca-importcertificateauthoritycertificate
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.ImportCertificateAuthorityCertificate.'
      operations:
      - method: POST
        name: importcertificateauthoritycertificate
        description: Amazon Private CA Import Certificate Authority Certificate
        call: amazon-private-ca.importcertificateauthoritycertificate
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-issuecertificate
      name: x-amz-target-acmprivateca-issuecertificate
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.IssueCertificate.'
      operations:
      - method: POST
        name: issuecertificate
        description: Amazon Private CA Issue Certificate
        call: amazon-private-ca.issuecertificate
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-listcertificateauthorities
      name: x-amz-target-acmprivateca-listcertificateauthorities
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.ListCertificateAuthorities.'
      operations:
      - method: POST
        name: listcertificateauthorities
        description: Amazon Private CA List Certificate Authorities
        call: amazon-private-ca.listcertificateauthorities
        with:
          MaxResults: rest.MaxResults
          NextToken: rest.NextToken
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-listpermissions
      name: x-amz-target-acmprivateca-listpermissions
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.ListPermissions.'
      operations:
      - method: POST
        name: listpermissions
        description: Amazon Private CA List Permissions
        call: amazon-private-ca.listpermissions
        with:
          MaxResults: rest.MaxResults
          NextToken: rest.NextToken
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-listtags
      name: x-amz-target-acmprivateca-listtags
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.ListTags.'
      operations:
      - method: POST
        name: listtags
        description: Amazon Private CA List Tags
        call: amazon-private-ca.listtags
        with:
          MaxResults: rest.MaxResults
          NextToken: rest.NextToken
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-putpolicy
      name: x-amz-target-acmprivateca-putpolicy
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.PutPolicy.'
      operations:
      - method: POST
        name: putpolicy
        description: Amazon Private CA Put Policy
        call: amazon-private-ca.putpolicy
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-restorecertificateauthority
      name: x-amz-target-acmprivateca-restorecertificateauthority
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.RestoreCertificateAuthority.'
      operations:
      - method: POST
        name: restorecertificateauthority
        description: Amazon Private CA Restore Certificate Authority
        call: amazon-private-ca.restorecertificateauthority
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-revokecertificate
      name: x-amz-target-acmprivateca-revokecertificate
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.RevokeCertificate.'
      operations:
      - method: POST
        name: revokecertificate
        description: Amazon Private CA Revoke Certificate
        call: amazon-private-ca.revokecertificate
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-tagcertificateauthority
      name: x-amz-target-acmprivateca-tagcertificateauthority
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.TagCertificateAuthority.'
      operations:
      - method: POST
        name: tagcertificateauthority
        description: Amazon Private CA Tag Certificate Authority
        call: amazon-private-ca.tagcertificateauthority
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-untagcertificateauthority
      name: x-amz-target-acmprivateca-untagcertificateauthority
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.UntagCertificateAuthority.'
      operations:
      - method: POST
        name: untagcertificateauthority
        description: Amazon Private CA Untag Certificate Authority
        call: amazon-private-ca.untagcertificateauthority
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/x-amz-target-acmprivateca-updatecertificateauthority
      name: x-amz-target-acmprivateca-updatecertificateauthority
      description: 'REST surface for #X-Amz-Target=ACMPrivateCA.UpdateCertificateAuthority.'
      operations:
      - method: POST
        name: updatecertificateauthority
        description: Amazon Private CA Update Certificate Authority
        call: amazon-private-ca.updatecertificateauthority
        with:
          X-Amz-Target: rest.X-Amz-Target
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: amazon-private-ca-mcp
    port: 9090
    transport: http
    description: MCP adapter for AWS Certificate Manager Private Certificate Authority. One tool per consumed operation, routed
      inline through this capability's consumes block.
    tools:
    - name: amazon-private-ca-create-certificate
      description: Amazon Private CA Create Certificate Authority
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.createcertificateauthority
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-create-certificate-2
      description: Amazon Private CA Create Certificate Authority Audit Report
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.createcertificateauthorityauditreport
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-create-permission
      description: Amazon Private CA Create Permission
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.createpermission
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-delete-certificate
      description: Amazon Private CA Delete Certificate Authority
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.deletecertificateauthority
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-delete-permission
      description: Amazon Private CA Delete Permission
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.deletepermission
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-delete-policy
      description: Amazon Private CA Delete Policy
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.deletepolicy
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-describe-certificate
      description: Amazon Private CA Describe Certificate Authority
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.describecertificateauthority
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-describe-certificate-2
      description: Amazon Private CA Describe Certificate Authority Audit Report
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.describecertificateauthorityauditreport
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-get-certificate
      description: Amazon Private CA Get Certificate
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: amazon-private-ca.getcertificate
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-get-certificate-2
      description: Amazon Private CA Get Certificate Authority Certificate
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: amazon-private-ca.getcertificateauthoritycertificate
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-get-certificate-3
      description: Amazon Private CA Get Certificate Authority Csr
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: amazon-private-ca.getcertificateauthoritycsr
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-get-policy
      description: Amazon Private CA Get Policy
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: amazon-private-ca.getpolicy
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-import-certificate
      description: Amazon Private CA Import Certificate Authority Certificate
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.importcertificateauthoritycertificate
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-issue-certificate
      description: Amazon Private CA Issue Certificate
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.issuecertificate
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-list-certificate
      description: Amazon Private CA List Certificate Authorities
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: amazon-private-ca.listcertificateauthorities
      with:
        MaxResults: tools.MaxResults
        NextToken: tools.NextToken
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-list-permissions
      description: Amazon Private CA List Permissions
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: amazon-private-ca.listpermissions
      with:
        MaxResults: tools.MaxResults
        NextToken: tools.NextToken
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-list-tags
      description: Amazon Private CA List Tags
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: amazon-private-ca.listtags
      with:
        MaxResults: tools.MaxResults
        NextToken: tools.NextToken
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-put-policy
      description: Amazon Private CA Put Policy
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.putpolicy
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-restore-certificate
      description: Amazon Private CA Restore Certificate Authority
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.restorecertificateauthority
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-revoke-certificate
      description: Amazon Private CA Revoke Certificate
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.revokecertificate
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-tag-certificate
      description: Amazon Private CA Tag Certificate Authority
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.tagcertificateauthority
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-untag-certificate
      description: Amazon Private CA Untag Certificate Authority
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.untagcertificateauthority
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-private-ca-update-certificate
      description: Amazon Private CA Update Certificate Authority
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-private-ca.updatecertificateauthority
      with:
        X-Amz-Target: tools.X-Amz-Target
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.