> ## Documentation Index
> Fetch the complete documentation index at: https://www.ravion.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# List attached ACM certificates

> List the certificates attached to a module instance's target(s), each correlated to the service it covers (or marked EXTERNAL).



## OpenAPI

````yaml https://api.ravion.com/openapi.yaml get /acm-certificates/attached
openapi: 3.0.0
info:
  title: Ravion
  version: 0.0.0
servers:
  - url: https://api.ravion.com
security:
  - BearerAuth: []
tags:
  - name: Projects
  - name: Environments
  - name: Pipelines
  - name: PipelineRuns
  - name: TerraformResources
  - name: TerraformExecutionSummaries
  - name: PipelineStepExecutions
  - name: AwsCloudWatch
  - name: PipelineVersions
  - name: Organizations
  - name: Stacks
  - name: StackWorkspaces
  - name: Auth
  - name: OAuth
  - name: User
  - name: Health
  - name: Memberships
  - name: ServiceAccounts
  - name: AwsDefaultNetworks
  - name: AwsAccounts
  - name: ApiKeys
  - name: ExecutionEnvironments
  - name: ModuleDefinitions
  - name: ModuleVersions
  - name: ModuleInstances
  - name: DefaultValueDefinitions
  - name: DefaultValues
  - name: CodeSources
  - name: Github
  - name: Gitlab
  - name: Git
  - name: Values
  - name: Deployments
  - name: DeploymentResources
  - name: InfrastructureEvents
  - name: WebSocket
  - name: Domains
  - name: AcmCertificates
  - name: Describe
  - name: Reports
paths:
  /acm-certificates/attached:
    get:
      tags:
        - AcmCertificates
      summary: List attached ACM certificates
      description: >-
        List the certificates attached to a module instance's target(s), each
        correlated to the service it covers (or marked `EXTERNAL`). The live AWS
        read is not cached.
      operationId: ListAttachedAcmCertificates
      parameters:
        - in: query
          name: moduleInstanceId
          required: true
          schema:
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                additionalProperties: false
                properties:
                  data:
                    $ref: '#/components/schemas/AcmCertificate.CertificatesResponse'
                required:
                  - data
                type: object
          description: The request has succeeded.
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Errors.UserFacingErrorData'
          description: The request is invalid or malformed.
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Errors.UserFacingErrorData'
          description: You are not authenticated
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Errors.UserFacingErrorData'
          description: You do not have permission to access this resource.
        '422':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Errors.UserFacingErrorData'
          description: Client error
        '500':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Errors.UserFacingErrorData'
          description: Server error
components:
  schemas:
    AcmCertificate.CertificatesResponse:
      additionalProperties: false
      description: >-
        The certificates attached to a module instance's target(s).
        `awsUnavailable` is true when the live AWS read failed and only the
        Ravion-known certificates are returned.
      properties:
        awsUnavailable:
          description: True when the live AWS read failed and the list may be incomplete.
          type: boolean
        certificates:
          description: Certificates attached to the target(s).
          items:
            $ref: '#/components/schemas/AcmCertificate.CertificateView'
          type: array
        targetArns:
          description: ARNs of the targets inspected.
          items:
            type: string
          type: array
      required:
        - certificates
        - targetArns
        - awsUnavailable
      type: object
    Errors.UserFacingErrorData:
      additionalProperties: false
      description: |-
        User-facing error presentation data.
        This is what the API returns to the frontend after formatting ErrorData
        using CEL templates from the error registry.

        Used for both:
        - Error fields on domain models (e.g., PipelineRun.error)
        - API error response bodies (HTTP 4xx/5xx responses)
      properties:
        action:
          allOf:
            - $ref: '#/components/schemas/Errors.Action'
          description: Optional action to help resolve the error
        code:
          description: Full error code, e.g., "Ravion:Pipeline:NOT_FOUND"
          type: string
        description:
          description: Additional description with more details
          type: string
        details:
          description: Structured details rendered as user-facing sections.
          items:
            $ref: '#/components/schemas/Errors.UserFacingErrorDetailSection'
          type: array
        isInternal:
          description: >-
            Indicates whether this error is internal (only set when
            ShowInternal=true).

            This allows SUPERADMINs to identify internal errors while viewing
            full details.
          type: boolean
        message:
          description: Main error message (required)
          type: string
        metadata:
          additionalProperties: {}
          description: >-
            Error params/metadata. Stripped for internal errors unless
            superadmin.
          type: object
        requestId:
          description: Request ID for correlating errors with server logs.
          type: string
      required:
        - code
        - message
      type: object
    AcmCertificate.CertificateView:
      additionalProperties: false
      description: >-
        A certificate attached to a module instance's target (a load balancer
        listener or a CloudFront distribution), with what it covers.
      properties:
        certArn:
          description: ARN of the certificate.
          type: string
        domains:
          description: >-
            The domain names the certificate covers. Empty for `EXTERNAL`
            certificates Ravion does not track.
          items:
            type: string
          type: array
        expiresAt:
          description: When the certificate expires, when known.
          format: date-time
          type: string
        isDefault:
          description: True if this is the target's default certificate.
          type: boolean
        issuedAt:
          description: When the certificate was issued, when known.
          format: date-time
          type: string
        kind:
          description: >-
            Kind of certificate: `CLUSTER_WILDCARD` | `SERVICE` | `EXTERNAL`
            (attached to the target but not managed by Ravion).
          type: string
        serviceEnvironmentId:
          description: Environment id of the covered service, when applicable.
          type: string
        serviceModuleInstanceId:
          description: Module instance id of the covered service, when applicable.
          type: string
        serviceName:
          description: Name of the service the certificate covers, when applicable.
          type: string
        serviceProjectId:
          description: Project id of the covered service, when applicable.
          type: string
        status:
          description: Certificate status, when known.
          type: string
        targetArn:
          description: ARN of the target the certificate is attached to.
          type: string
      required:
        - certArn
        - kind
        - isDefault
        - domains
      type: object
    Errors.Action:
      additionalProperties: false
      description: Action to help user resolve the error
      properties:
        label:
          description: Button/link label text
          type: string
        url:
          description: URL to navigate to for resolution
          type: string
      required:
        - label
        - url
      type: object
    Errors.UserFacingErrorDetailSection:
      additionalProperties: false
      description: Structured user-facing error detail section.
      properties:
        items:
          description: List of detail values for this section.
          items:
            type: string
          type: array
        object:
          additionalProperties: {}
          description: Structured detail payload for object rendering.
          type: object
        render:
          description: Rendering hint for clients. Valid values are list or object.
          type: string
        title:
          description: Detail section title shown in the UI.
          type: string
      required:
        - title
        - render
      type: object
  securitySchemes:
    BearerAuth:
      scheme: Bearer
      type: http

````