Disables the certificate authority (CA) enrollment policy for the specified directory. This stops automatic certificate enrollment and management for domain-joined clients, but does not affect existing certificates.
Disabling the CA enrollment policy prevents new certificates from being automatically enrolled, but existing certificates remain valid and functional until they expire.
Parameters:
-
directory_id
(DirectoryId)
–
The identifier of the directory for which to disable the CA enrollment policy.
Raises:
Source code in docs_src/capo_directory_service/_services/directory_service.py
| def disable_ca_enrollment_policy(
self,
directory_id: "capo_directory_service.types.directory_id.DirectoryId",
*,
config_overrides: Optional[DirectoryServiceClientConfig] = None,
) -> "capo_directory_service.types.disable_ca_enrollment_policy_result.DisableCAEnrollmentPolicyResult":
"""<p>Disables the certificate authority (CA) enrollment policy for the specified directory. This stops automatic certificate enrollment and management for domain-joined clients, but does not affect existing certificates.</p> <important> <p>Disabling the CA enrollment policy prevents new certificates from being automatically enrolled, but existing certificates remain valid and functional until they expire.</p> </important>
Args:
directory_id: <p>The identifier of the directory for which to disable the CA enrollment policy.</p>
Raises:
capo_directory_service.errors.access_denied_exception.AccessDeniedException: <p>You do not have sufficient access to perform this action.</p>
capo_directory_service.errors.client_exception.ClientException: <p>A client exception has occurred.</p>
capo_directory_service.errors.directory_does_not_exist_exception.DirectoryDoesNotExistException: <p>The specified directory does not exist in the system.</p>
capo_directory_service.errors.directory_unavailable_exception.DirectoryUnavailableException: <p>The specified directory is unavailable.</p>
capo_directory_service.errors.disable_already_in_progress_exception.DisableAlreadyInProgressException: <p>A disable operation for CA enrollment policy is already in progress for this directory.</p>
capo_directory_service.errors.entity_does_not_exist_exception.EntityDoesNotExistException: <p>The specified entity could not be found.</p>
capo_directory_service.errors.invalid_parameter_exception.InvalidParameterException: <p>One or more parameters are not valid.</p>
capo_directory_service.errors.service_exception.ServiceException: <p>An exception has occurred in Directory Service.</p>
capo_directory_service.errors.UnknownServiceError: The service returned an error code this client does not model.
"""
def _handler(
req: "OperationRequest[capo_directory_service.types.disable_ca_enrollment_policy_request.DisableCAEnrollmentPolicyRequest]",
) -> OperationResponse[
"capo_directory_service.types.disable_ca_enrollment_policy_result.DisableCAEnrollmentPolicyResult"
]:
import capo_directory_service._operations.directory_service_20150416.disable_ca_enrollment_policy
output, http_response = (
capo_directory_service._operations.directory_service_20150416.disable_ca_enrollment_policy.disable_ca_enrollment_policy(
req.options, req.input
)
)
return OperationResponse(output=output, response=http_response)
interceptors_, options_ = self.operation_options(
config_overrides, OperationLogging("DisableCAEnrollmentPolicy")
)
input_: capo_directory_service.types.disable_ca_enrollment_policy_request.DisableCAEnrollmentPolicyRequest = {
"directory_id": directory_id
}
response = execute_pipeline(
OperationRequest(input=input_, options=options_),
handler=_handler,
interceptors=list(interceptors_),
)
response.response.close()
return response.output
|