ACM / Client / create_acme_external_account_binding

create_acme_external_account_binding

ACM.Client.create_acme_external_account_binding(**kwargs)

Creates an external account binding (EAB) for an ACME endpoint. An EAB provides credentials that authorize an ACME client to register an account with the endpoint. Each EAB is associated with an IAM role that controls what certificate operations the ACME client can perform.

See also: AWS API Documentation

Request Syntax

response = client.create_acme_external_account_binding(
    IdempotencyToken='string',
    AcmeEndpointArn='string',
    RoleArn='string',
    Expiration={
        'Value': 123,
        'Type': 'MINUTES'|'HOURS'|'DAYS'
    },
    Tags=[
        {
            'Key': 'string',
            'Value': 'string'
        },
    ]
)

Parameters:

• IdempotencyToken (string) –

  A unique, case-sensitive identifier to ensure idempotency of the request.

  This field is autopopulated if not provided.

• AcmeEndpointArn (string) –

  [REQUIRED]

  The Amazon Resource Name (ARN) of the ACME endpoint.

• RoleArn (string) –

  [REQUIRED]

  The Amazon Resource Name (ARN) of the IAM role to associate with the external account binding.

• Expiration (dict) –

  The expiration configuration for the external account binding.

  • Value (integer) – [REQUIRED]

    The numeric value of the expiration.

  • Type (string) – [REQUIRED]

    The time unit for the expiration value.

• Tags (list) –

  One or more tags to associate with the external account binding.

  • (dict) –

    A key-value pair that identifies or specifies metadata about an ACM resource.

    • Key (string) – [REQUIRED]

      The key of the tag.

    • Value (string) –

      The value of the tag.

Return type:

dict

Returns:

Response Syntax

{
    'ExternalAccountBinding': {
        'AcmeExternalAccountBindingArn': 'string',
        'AcmeEndpointArn': 'string',
        'RoleArn': 'string',
        'ExpiresAt': datetime(2015, 1, 1),
        'RevokedAt': datetime(2015, 1, 1),
        'LastUsedAt': datetime(2015, 1, 1),
        'CreatedAt': datetime(2015, 1, 1),
        'UpdatedAt': datetime(2015, 1, 1)
    }
}

Response Structure

• (dict) –

  • ExternalAccountBinding (dict) –

    The created external account binding.

    • AcmeExternalAccountBindingArn (string) –

      The Amazon Resource Name (ARN) of the ACME external account binding.

    • AcmeEndpointArn (string) –

      The Amazon Resource Name (ARN) of the ACME endpoint.

    • RoleArn (string) –

      The Amazon Resource Name (ARN) of the IAM role associated with the external account binding.

    • ExpiresAt (datetime) –

      The time at which the external account binding expires.

    • RevokedAt (datetime) –

      The time at which the external account binding was revoked.

    • LastUsedAt (datetime) –

      The time at which the external account binding was last used.

    • CreatedAt (datetime) –

      The time at which the external account binding was created.

    • UpdatedAt (datetime) –

      The time at which the external account binding was last updated.

Exceptions

• ACM.Client.exceptions.InternalServerException

• ACM.Client.exceptions.ServiceQuotaExceededException

• ACM.Client.exceptions.ConflictException

• ACM.Client.exceptions.AccessDeniedException

• ACM.Client.exceptions.ValidationException

• ACM.Client.exceptions.ResourceNotFoundException

• ACM.Client.exceptions.ThrottlingException