delete_audit_suppression

delete_audit_suppression(**kwargs)

Deletes a Device Defender audit suppression.

Requires permission to access the DeleteAuditSuppression action.

See also: AWS API Documentation

Request Syntax

response = client.delete_audit_suppression(
    checkName='string',
    resourceIdentifier={
        'deviceCertificateId': 'string',
        'caCertificateId': 'string',
        'cognitoIdentityPoolId': 'string',
        'clientId': 'string',
        'policyVersionIdentifier': {
            'policyName': 'string',
            'policyVersionId': 'string'
        },
        'account': 'string',
        'iamRoleArn': 'string',
        'roleAliasArn': 'string',
        'issuerCertificateIdentifier': {
            'issuerCertificateSubject': 'string',
            'issuerId': 'string',
            'issuerCertificateSerialNumber': 'string'
        },
        'deviceCertificateArn': 'string'
    }
)

Parameters

• checkName (string) --

  [REQUIRED]

  An audit check name. Checks must be enabled for your account. (Use DescribeAccountAuditConfiguration to see the list of all checks, including those that are enabled or use UpdateAccountAuditConfiguration to select which checks are enabled.)

• resourceIdentifier (dict) --

  [REQUIRED]

  Information that identifies the noncompliant resource.

  • deviceCertificateId (string) --

    The ID of the certificate attached to the resource.

  • caCertificateId (string) --

    The ID of the CA certificate used to authorize the certificate.

  • cognitoIdentityPoolId (string) --

    The ID of the Amazon Cognito identity pool.

  • clientId (string) --

    The client ID.

  • policyVersionIdentifier (dict) --

    The version of the policy associated with the resource.

    • policyName (string) --

      The name of the policy.

    • policyVersionId (string) --

      The ID of the version of the policy associated with the resource.

  • account (string) --

    The account with which the resource is associated.

  • iamRoleArn (string) --

    The ARN of the IAM role that has overly permissive actions.

  • roleAliasArn (string) --

    The ARN of the role alias that has overly permissive actions.

  • issuerCertificateIdentifier (dict) --

    The issuer certificate identifier.

    • issuerCertificateSubject (string) --

      The subject of the issuer certificate.

    • issuerId (string) --

      The issuer ID.

    • issuerCertificateSerialNumber (string) --

      The issuer certificate serial number.

  • deviceCertificateArn (string) --

    The ARN of the identified device certificate.

Return type

dict

Returns

Response Syntax

{}

Response Structure

• (dict) --

Exceptions

• IoT.Client.exceptions.InvalidRequestException
• IoT.Client.exceptions.ThrottlingException
• IoT.Client.exceptions.InternalFailureException