Skip to content

reject_delegation_request

reject_delegation_request(
    delegation_request_id: delegationRequestIdType,
    *,
    config_overrides: Optional[IAMClientConfig] = None,
    notes: Optional[notesType] = None,
) -> None

Rejects a delegation request, denying the requested temporary access.

Once a request is rejected, it cannot be accepted or updated later. Rejected requests expire after 7 days.

When rejecting a request, an optional explanation can be added using the Notes request parameter.

For more details, see Managing Permissions for Delegation Requests.

Parameters:

  • delegation_request_id (delegationRequestIdType) –

    The unique identifier of the delegation request to reject.

  • notes (Optional[notesType], default: None ) –

    Optional notes explaining the reason for rejecting the delegation request.

Raises:

  • ConcurrentModificationException –

    The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.

  • InvalidInputException –

    The request was rejected because an invalid or out-of-range value was supplied for an input parameter.

  • NoSuchEntityException –

    The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.

  • ServiceFailureException –

    The request processing has failed because of an unknown error, exception or failure.

  • UnknownServiceError –

    The service returned an error code this client does not model.

Source code in docs_src/capo_iam/_services/iam.py
def reject_delegation_request(
    self,
    delegation_request_id: "capo_iam.types.delegation_request_id_type.delegationRequestIdType",
    *,
    config_overrides: Optional[IAMClientConfig] = None,
    notes: Optional["capo_iam.types.notes_type.notesType"] = None,
) -> None:
    """<p>Rejects a delegation request, denying the requested temporary access.</p> <p>Once a request is rejected, it cannot be accepted or updated later. Rejected requests expire after 7 days.</p> <p>When rejecting a request, an optional explanation can be added using the <code>Notes</code> request parameter.</p> <p> For more details, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies-temporary-delegation.html#temporary-delegation-managing-permissions"> Managing Permissions for Delegation Requests</a>. </p>

    Args:
        delegation_request_id: <p>The unique identifier of the delegation request to reject.</p>
        notes: <p>Optional notes explaining the reason for rejecting the delegation request.</p>

    Raises:
        capo_iam.errors.concurrent_modification_exception.ConcurrentModificationException: <p>The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.</p>
        capo_iam.errors.invalid_input_exception.InvalidInputException: <p>The request was rejected because an invalid or out-of-range value was supplied for an input parameter.</p>
        capo_iam.errors.no_such_entity_exception.NoSuchEntityException: <p>The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.</p>
        capo_iam.errors.service_failure_exception.ServiceFailureException: <p>The request processing has failed because of an unknown error, exception or failure.</p>
        capo_iam.errors.UnknownServiceError: The service returned an error code this client does not model.
    """

    def _handler(
        req: "OperationRequest[capo_iam.types.reject_delegation_request_request.RejectDelegationRequestRequest]",
    ) -> OperationResponse[None]:
        import capo_iam._operations.aws_identity_management_v20100508.reject_delegation_request

        output, http_response = (
            capo_iam._operations.aws_identity_management_v20100508.reject_delegation_request.reject_delegation_request(
                req.options, req.input
            )
        )
        return OperationResponse(output=output, response=http_response)

    interceptors_, options_ = self.operation_options(
        config_overrides, OperationLogging("RejectDelegationRequest")
    )
    input_: capo_iam.types.reject_delegation_request_request.RejectDelegationRequestRequest = {
        "delegation_request_id": delegation_request_id
    }
    if notes is not None:
        input_["notes"] = notes

    response = execute_pipeline(
        OperationRequest(input=input_, options=options_),
        handler=_handler,
        interceptors=list(interceptors_),
    )
    response.response.close()
    return response.output