IAMRolesAnywhere / Client / import_crl

import_crl#

IAMRolesAnywhere.Client.import_crl(**kwargs)#

Imports the certificate revocation list (CRL). A CRL is a list of certificates that have been revoked by the issuing certificate Authority (CA).In order to be properly imported, a CRL must be in PEM format. IAM Roles Anywhere validates against the CRL before issuing credentials.

Required permissions: rolesanywhere:ImportCrl.

See also: AWS API Documentation

Request Syntax

response = client.import_crl(
    crlData=b'bytes',
    enabled=True|False,
    name='string',
    tags=[
        {
            'key': 'string',
            'value': 'string'
        },
    ],
    trustAnchorArn='string'
)
Parameters:

  • crlData (bytes) –

    [REQUIRED]

    The x509 v3 specified certificate revocation list (CRL).

  • enabled (boolean) – Specifies whether the certificate revocation list (CRL) is enabled.

  • name (string) –

    [REQUIRED]

    The name of the certificate revocation list (CRL).

  • tags (list) –

    A list of tags to attach to the certificate revocation list (CRL).

    • (dict) –

      A label that consists of a key and value you define.

      • key (string) – [REQUIRED]

        The tag key.

      • value (string) – [REQUIRED]

        The tag value.

  • trustAnchorArn (string) –

    [REQUIRED]

    The ARN of the TrustAnchor the certificate revocation list (CRL) will provide revocation for.

Return type:

dict

Returns:

Response Syntax

{
    'crl': {
        'createdAt': datetime(2015, 1, 1),
        'crlArn': 'string',
        'crlData': b'bytes',
        'crlId': 'string',
        'enabled': True|False,
        'name': 'string',
        'trustAnchorArn': 'string',
        'updatedAt': datetime(2015, 1, 1)
    }
}

Response Structure

  • (dict) –

    • crl (dict) –

      The state of the certificate revocation list (CRL) after a read or write operation.

      • createdAt (datetime) –

        The ISO-8601 timestamp when the certificate revocation list (CRL) was created.

      • crlArn (string) –

        The ARN of the certificate revocation list (CRL).

      • crlData (bytes) –

        The state of the certificate revocation list (CRL) after a read or write operation.

      • crlId (string) –

        The unique identifier of the certificate revocation list (CRL).

      • enabled (boolean) –

        Indicates whether the certificate revocation list (CRL) is enabled.

      • name (string) –

        The name of the certificate revocation list (CRL).

      • trustAnchorArn (string) –

        The ARN of the TrustAnchor the certificate revocation list (CRL) will provide revocation for.

      • updatedAt (datetime) –

        The ISO-8601 timestamp when the certificate revocation list (CRL) was last updated.

Exceptions