describe_broker(**kwargs)¶Returns information about the specified broker.
See also: AWS API Documentation
Request Syntax
response = client.describe_broker(
BrokerId='string'
)
[REQUIRED]
The unique ID that Amazon MQ generates for the broker.
{
'ActionsRequired': [
{
'ActionRequiredCode': 'string',
'ActionRequiredInfo': 'string'
},
],
'AuthenticationStrategy': 'SIMPLE'|'LDAP',
'AutoMinorVersionUpgrade': True|False,
'BrokerArn': 'string',
'BrokerId': 'string',
'BrokerInstances': [
{
'ConsoleURL': 'string',
'Endpoints': [
'string',
],
'IpAddress': 'string'
},
],
'BrokerName': 'string',
'BrokerState': 'CREATION_IN_PROGRESS'|'CREATION_FAILED'|'DELETION_IN_PROGRESS'|'RUNNING'|'REBOOT_IN_PROGRESS'|'CRITICAL_ACTION_REQUIRED',
'Configurations': {
'Current': {
'Id': 'string',
'Revision': 123
},
'History': [
{
'Id': 'string',
'Revision': 123
},
],
'Pending': {
'Id': 'string',
'Revision': 123
}
},
'Created': datetime(2015, 1, 1),
'DeploymentMode': 'SINGLE_INSTANCE'|'ACTIVE_STANDBY_MULTI_AZ'|'CLUSTER_MULTI_AZ',
'EncryptionOptions': {
'KmsKeyId': 'string',
'UseAwsOwnedKey': True|False
},
'EngineType': 'ACTIVEMQ'|'RABBITMQ',
'EngineVersion': 'string',
'HostInstanceType': 'string',
'LdapServerMetadata': {
'Hosts': [
'string',
],
'RoleBase': 'string',
'RoleName': 'string',
'RoleSearchMatching': 'string',
'RoleSearchSubtree': True|False,
'ServiceAccountUsername': 'string',
'UserBase': 'string',
'UserRoleName': 'string',
'UserSearchMatching': 'string',
'UserSearchSubtree': True|False
},
'Logs': {
'Audit': True|False,
'AuditLogGroup': 'string',
'General': True|False,
'GeneralLogGroup': 'string',
'Pending': {
'Audit': True|False,
'General': True|False
}
},
'MaintenanceWindowStartTime': {
'DayOfWeek': 'MONDAY'|'TUESDAY'|'WEDNESDAY'|'THURSDAY'|'FRIDAY'|'SATURDAY'|'SUNDAY',
'TimeOfDay': 'string',
'TimeZone': 'string'
},
'PendingAuthenticationStrategy': 'SIMPLE'|'LDAP',
'PendingEngineVersion': 'string',
'PendingHostInstanceType': 'string',
'PendingLdapServerMetadata': {
'Hosts': [
'string',
],
'RoleBase': 'string',
'RoleName': 'string',
'RoleSearchMatching': 'string',
'RoleSearchSubtree': True|False,
'ServiceAccountUsername': 'string',
'UserBase': 'string',
'UserRoleName': 'string',
'UserSearchMatching': 'string',
'UserSearchSubtree': True|False
},
'PendingSecurityGroups': [
'string',
],
'PubliclyAccessible': True|False,
'SecurityGroups': [
'string',
],
'StorageType': 'EBS'|'EFS',
'SubnetIds': [
'string',
],
'Tags': {
'string': 'string'
},
'Users': [
{
'PendingChange': 'CREATE'|'UPDATE'|'DELETE',
'Username': 'string'
},
]
}
Response Structure
HTTP Status Code 200: OK.
A list of actions required for a broker.
The action required to resolve a broker issue when the broker is in a CRITICAL_ACTION_REQUIRED state.
The code you can use to resolve your broker issue when the broker is in a CRITICAL_ACTION_REQUIRED state. You can find instructions by choosing the link for your code from the list of action required codes in Amazon MQ action required codes. Each code references a topic with detailed information, instructions, and recommendations for how to resolve the issue and prevent future occurrences.
Information about the action required to resolve your broker issue when the broker is in a CRITICAL_ACTION_REQUIRED state.
The authentication strategy used to secure the broker. The default is SIMPLE.
Enables automatic upgrades to new minor versions for brokers, as new versions are released and supported by Amazon MQ. Automatic upgrades occur during the scheduled maintenance window of the broker or after a manual broker reboot.
The broker's Amazon Resource Name (ARN).
The unique ID that Amazon MQ generates for the broker.
A list of information about allocated brokers.
Returns information about all brokers.
The brokers web console URL.
The broker's wire-level protocol endpoints.
The IP address of the Elastic Network Interface (ENI) attached to the broker. Does not apply to RabbitMQ brokers.
The broker's name. This value must be unique in your AWS account, 1-50 characters long, must contain only letters, numbers, dashes, and underscores, and must not contain white spaces, brackets, wildcard characters, or special characters.
The broker's status.
The list of all revisions for the specified configuration.
The broker's current configuration.
Required. The unique ID that Amazon MQ generates for the configuration.
The revision number of the configuration.
The history of configurations applied to the broker.
A list of information about the configuration.
Warning
Does not apply to RabbitMQ brokers.
Required. The unique ID that Amazon MQ generates for the configuration.
The revision number of the configuration.
The broker's pending configuration.
Required. The unique ID that Amazon MQ generates for the configuration.
The revision number of the configuration.
The time when the broker was created.
The broker's deployment mode.
Encryption options for the broker. Does not apply to RabbitMQ brokers.
The customer master key (CMK) to use for the AWS Key Management Service (KMS). This key is used to encrypt your data at rest. If not provided, Amazon MQ will use a default CMK to encrypt your data.
Enables the use of an AWS owned CMK using AWS Key Management Service (KMS). Set to true by default, if no value is provided, for example, for RabbitMQ brokers.
The type of broker engine. Currently, Amazon MQ supports ACTIVEMQ and RABBITMQ.
The broker engine's version. For a list of supported engine versions, see Supported engines.
The broker's instance type.
The metadata of the LDAP server used to authenticate and authorize connections to the broker.
Specifies the location of the LDAP server such as AWS Directory Service for Microsoft Active Directory . Optional failover server.
The distinguished name of the node in the directory information tree (DIT) to search for roles or groups. For example, ou=group, ou=corp, dc=corp, dc=example, dc=com.
Specifies the LDAP attribute that identifies the group name attribute in the object returned from the group membership query.
The LDAP search filter used to find roles within the roleBase. The distinguished name of the user matched by userSearchMatching is substituted into the {0} placeholder in the search filter. The client's username is substituted into the {1} placeholder. For example, if you set this option to (member=uid={1})for the user janedoe, the search filter becomes (member=uid=janedoe) after string substitution. It matches all role entries that have a member attribute equal to uid=janedoe under the subtree selected by the roleBase.
The directory search scope for the role. If set to true, scope is to search the entire subtree.
Service account username. A service account is an account in your LDAP server that has access to initiate a connection. For example, cn=admin,dc=corp, dc=example, dc=com.
Select a particular subtree of the directory information tree (DIT) to search for user entries. The subtree is specified by a DN, which specifies the base node of the subtree. For example, by setting this option to ou=Users,ou=corp, dc=corp, dc=example, dc=com, the search for user entries is restricted to the subtree beneath ou=Users, ou=corp, dc=corp, dc=example, dc=com.
Specifies the name of the LDAP attribute for the user group membership.
The LDAP search filter used to find users within the userBase. The client's username is substituted into the {0} placeholder in the search filter. For example, if this option is set to (uid={0}) and the received username is janedoe, the search filter becomes (uid=janedoe) after string substitution. It will result in matching an entry like uid=janedoe, ou=Users,ou=corp, dc=corp, dc=example, dc=com.
The directory search scope for the user. If set to true, scope is to search the entire subtree.
The list of information about logs currently enabled and pending to be deployed for the specified broker.
Enables audit logging. Every user management action made using JMX or the ActiveMQ Web Console is logged.
The location of the CloudWatch Logs log group where audit logs are sent.
Enables general logging.
The location of the CloudWatch Logs log group where general logs are sent.
The list of information about logs pending to be deployed for the specified broker.
Enables audit logging. Every user management action made using JMX or the ActiveMQ Web Console is logged.
Enables general logging.
The parameters that determine the WeeklyStartTime.
Required. The day of the week.
Required. The time, in 24-hour format.
The time zone, UTC by default, in either the Country/City format, or the UTC offset format.
The authentication strategy that will be applied when the broker is rebooted. The default is SIMPLE.
The broker engine version to upgrade to. For a list of supported engine versions, see Supported engines.
The broker's host instance type to upgrade to. For a list of supported instance types, see Broker instance types.
The metadata of the LDAP server that will be used to authenticate and authorize connections to the broker after it is rebooted.
Specifies the location of the LDAP server such as AWS Directory Service for Microsoft Active Directory . Optional failover server.
The distinguished name of the node in the directory information tree (DIT) to search for roles or groups. For example, ou=group, ou=corp, dc=corp, dc=example, dc=com.
Specifies the LDAP attribute that identifies the group name attribute in the object returned from the group membership query.
The LDAP search filter used to find roles within the roleBase. The distinguished name of the user matched by userSearchMatching is substituted into the {0} placeholder in the search filter. The client's username is substituted into the {1} placeholder. For example, if you set this option to (member=uid={1})for the user janedoe, the search filter becomes (member=uid=janedoe) after string substitution. It matches all role entries that have a member attribute equal to uid=janedoe under the subtree selected by the roleBase.
The directory search scope for the role. If set to true, scope is to search the entire subtree.
Service account username. A service account is an account in your LDAP server that has access to initiate a connection. For example, cn=admin,dc=corp, dc=example, dc=com.
Select a particular subtree of the directory information tree (DIT) to search for user entries. The subtree is specified by a DN, which specifies the base node of the subtree. For example, by setting this option to ou=Users,ou=corp, dc=corp, dc=example, dc=com, the search for user entries is restricted to the subtree beneath ou=Users, ou=corp, dc=corp, dc=example, dc=com.
Specifies the name of the LDAP attribute for the user group membership.
The LDAP search filter used to find users within the userBase. The client's username is substituted into the {0} placeholder in the search filter. For example, if this option is set to (uid={0}) and the received username is janedoe, the search filter becomes (uid=janedoe) after string substitution. It will result in matching an entry like uid=janedoe, ou=Users,ou=corp, dc=corp, dc=example, dc=com.
The directory search scope for the user. If set to true, scope is to search the entire subtree.
The list of pending security groups to authorize connections to brokers.
Enables connections from applications outside of the VPC that hosts the broker's subnets.
The list of rules (1 minimum, 125 maximum) that authorize connections to brokers.
The broker's storage type.
The list of groups that define which subnets and IP ranges the broker can use from different Availability Zones.
The list of all tags associated with this broker.
The list of all broker usernames for the specified broker.
Returns a list of all broker users. Does not apply to RabbitMQ brokers.
The type of change pending for the broker user.
Required. The username of the broker user. This value can contain only alphanumeric characters, dashes, periods, underscores, and tildes (- . _ ~). This value must be 2-100 characters long.
Exceptions
MQ.Client.exceptions.NotFoundExceptionMQ.Client.exceptions.BadRequestExceptionMQ.Client.exceptions.InternalServerErrorExceptionMQ.Client.exceptions.ForbiddenException