Under profiles.<profile>, add a properties section with the following AWS CA-specific settings.
aws-ca-cert-template-arn
The AWS ARN that uniquely identifies the certificate template for issuing certificates. For example:
"arn:aws:acm-pca:::template/EndEntityServerAuthCertificate_APIPassthrough/V1"Mandatory: Yes.
cert-default-validity-period
The default validity period, as an ISO 8601 string for the corresponding profile. For example, P3Y0M0D is a three years validity period.
Mandatory: Only if your enrollment client does not provide a validity period in the enrollment request for the profile.