ControlTower / Client / disable_control

disable_control#

ControlTower.Client.disable_control(**kwargs)#

This API call turns off a control. It starts an asynchronous operation that deletes Amazon Web Services resources on the specified organizational unit and the accounts it contains. The resources will vary according to the control that you specify. For usage examples, see the Controls Reference Guide.

Request Syntax

response = client.disable_control(
    controlIdentifier='string',
    targetIdentifier='string'
)

Parameters:

controlIdentifier (string) –
[REQUIRED]

The ARN of the control. Only Strongly recommended and Elective controls are permitted, with the exception of the Region deny control. For information on how to find the controlIdentifier, see the overview page.
targetIdentifier (string) –
[REQUIRED]

The ARN of the organizational unit. For information on how to find the targetIdentifier, see the overview page.

Return type:

dict

Returns:

Response Syntax

{
    'operationIdentifier': 'string'
}

Response Structure

(dict) –
- operationIdentifier (string) –
  
  The ID of the asynchronous operation, which is used to track status. The operation is available for 90 days.

Exceptions

ControlTower.Client.exceptions.ValidationException
ControlTower.Client.exceptions.ConflictException
ControlTower.Client.exceptions.ServiceQuotaExceededException
ControlTower.Client.exceptions.InternalServerException
ControlTower.Client.exceptions.AccessDeniedException
ControlTower.Client.exceptions.ThrottlingException
ControlTower.Client.exceptions.ResourceNotFoundException