AWS Certificate Manager Private Certificate Authority now supports root CA hierarchies

AWS Certificate Manager (ACM) Private CA provides you a secure and highly-available private CA service without the upfront investment and ongoing maintenance costs of operating your own private CA infrastructure. In addition to simple management, ACM Private CA provides essential security for operating a CA in accordance with your internal compliance rules and security best practices. ACM Private CA also provides APIs to automate creation and renewal of private certificates to identify EC2 instances, containers, IoT devices, and on-premises resources.

You can use ACM Private CA in 15 public AWS Regions and GovCloud (US). See the AWS Regions Table for details.