DirectoryService / Client / disable_ca_enrollment_policy
disable_ca_enrollment_policy¶
- DirectoryService.Client.disable_ca_enrollment_policy(**kwargs)¶
Disables the certificate authority (CA) enrollment policy for the specified directory. This stops automatic certificate enrollment and management for domain-joined clients, but does not affect existing certificates.
Warning
Disabling the CA enrollment policy prevents new certificates from being automatically enrolled, but existing certificates remain valid and functional until they expire.
See also: AWS API Documentation
Request Syntax
response = client.disable_ca_enrollment_policy( DirectoryId='string' )
- Parameters:
DirectoryId (string) –
[REQUIRED]
The identifier of the directory for which to disable the CA enrollment policy.
- Return type:
dict
- Returns:
Response Syntax
{}
Response Structure
(dict) –
Contains the results of the DisableCAEnrollmentPolicy operation.
Exceptions
DirectoryService.Client.exceptions.DirectoryDoesNotExistException
DirectoryService.Client.exceptions.DirectoryUnavailableException
DirectoryService.Client.exceptions.InvalidParameterException
DirectoryService.Client.exceptions.DisableAlreadyInProgressException
DirectoryService.Client.exceptions.EntityDoesNotExistException