IAMRolesAnywhere / Client / update_crl

update_crl#

IAMRolesAnywhere.Client.update_crl(**kwargs)#

Updates the certificate revocation list (CRL). A CRL is a list of certificates that have been revoked by the issuing certificate authority (CA). IAM Roles Anywhere validates against the CRL before issuing credentials.

Required permissions: rolesanywhere:UpdateCrl.

See also: AWS API Documentation

Request Syntax

response = client.update_crl(
    crlData=b'bytes',
    crlId='string',
    name='string'
)
Parameters:
  • crlData (bytes) – The x509 v3 specified certificate revocation list (CRL).

  • crlId (string) –

    [REQUIRED]

    The unique identifier of the certificate revocation list (CRL).

  • name (string) – The name of the Crl.

Return type:

dict

Returns:

Response Syntax

{
    'crl': {
        'createdAt': datetime(2015, 1, 1),
        'crlArn': 'string',
        'crlData': b'bytes',
        'crlId': 'string',
        'enabled': True|False,
        'name': 'string',
        'trustAnchorArn': 'string',
        'updatedAt': datetime(2015, 1, 1)
    }
}

Response Structure

  • (dict) –

    • crl (dict) –

      The state of the certificate revocation list (CRL) after a read or write operation.

      • createdAt (datetime) –

        The ISO-8601 timestamp when the certificate revocation list (CRL) was created.

      • crlArn (string) –

        The ARN of the certificate revocation list (CRL).

      • crlData (bytes) –

        The state of the certificate revocation list (CRL) after a read or write operation.

      • crlId (string) –

        The unique identifier of the certificate revocation list (CRL).

      • enabled (boolean) –

        Indicates whether the certificate revocation list (CRL) is enabled.

      • name (string) –

        The name of the certificate revocation list (CRL).

      • trustAnchorArn (string) –

        The ARN of the TrustAnchor the certificate revocation list (CRL) will provide revocation for.

      • updatedAt (datetime) –

        The ISO-8601 timestamp when the certificate revocation list (CRL) was last updated.

Exceptions