create_acme_external_account_binding
async
¶
create_acme_external_account_binding(
acme_endpoint_arn: AcmeEndpointArn,
role_arn: RoleArn,
*,
config_overrides: Optional[AsyncACMClientConfig] = None,
idempotency_token: Optional[str] = None,
expiration: Optional[Expiration] = None,
tags: Optional[TagList] = None,
) -> CreateAcmeExternalAccountBindingResponse
Creates an external account binding (EAB) for an ACME endpoint. An EAB provides credentials that authorize an ACME client to register an account with the endpoint. Each EAB is associated with an IAM role that controls what certificate operations the ACME client can perform.
Parameters:
-
idempotency_token(Optional[str], default:None) –A unique, case-sensitive identifier to ensure idempotency of the request.
-
acme_endpoint_arn(AcmeEndpointArn) –The Amazon Resource Name (ARN) of the ACME endpoint.
-
role_arn(RoleArn) –The Amazon Resource Name (ARN) of the IAM role to associate with the external account binding.
-
expiration(Optional[Expiration], default:None) –The expiration configuration for the external account binding.
-
tags(Optional[TagList], default:None) –One or more tags to associate with the external account binding.
Raises:
-
AccessDeniedException–You do not have access required to perform this action.
-
ConflictException–You are trying to update a resource or configuration that is already being created or updated. Wait for the previous operation to finish and try again.
-
InternalServerException–The request processing has failed because of an unknown error, exception, or failure.
-
ResourceNotFoundException–The specified certificate cannot be found in the caller's account or the caller's account cannot be found.
-
ServiceQuotaExceededException–A service quota has been exceeded.
-
ThrottlingException–The request was denied because it exceeded a quota.
-
ValidationException–The supplied input failed to satisfy constraints of an Amazon Web Services service.
-
UnknownServiceError–The service returned an error code this client does not model.