**To attach tags to a private certificate authority**

The ``tag-certificate-authority`` command attaches one or more tags to your private CA::

  aws acm-pca tag-certificate-authority --certificate-authority-arn arn:aws:acm-pca:region:account:certificate-authority/12345678-1234-1234-1234-123456789012 --tags Key=Admin,Value=Alice