📊Tracking: ACM Private CA

Add your +1 👍 to help us prioritize high-level constructs for this service
---

### Overview:

AWS Certificate Manager Private Certificate Authority is a managed private CA service that extends ACM certificate management to private certificates. With private certificates you can authenticate resources inside an organization. Private certificates allow entities like users, web servers, VPN users, internal API endpoints, and IoT devices to prove their identity and establish encrypted communications channels. With ACM Private CA, you can create complete CA hierarchies, including root and subordinate CAs, without the investment and maintenance costs of operating your own certificate authority.

[AWS Docs](https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaWelcome.html)

### Maturity: CloudFormation Resources Only

See the [AWS Construct Library Module Lifecycle doc](https://github.com/aws/aws-cdk-rfcs/blob/master/text/0107-construct-library-module-lifecycle.md) for more information about maturity levels.

### Implementation:

See the [CDK API Reference](https://docs.aws.amazon.com/cdk/api/latest/docs/aws-acmpca-readme.html) for more implementation details.

### Issue list:

---
This is a 📊Tracking Issue

Start with the linked AWS ACM Private CA documentation and the CDK API Reference to understand the service and the existing CloudFormation-only package. The issue names no implementation files or tests and does not define the high-level constructs or acceptance criteria, so completion would require an agreed scope for supporting ACM Private CA constructs.

Written by the indexing model from the issue text.