Skip to content

create_scope async

create_scope(
    scope_name: ScopeName,
    scope_configuration: ScopeConfiguration,
    *,
    config_overrides: Optional[AsyncNetworkSecurityManagerClientConfig] = None,
    client_token: Optional[IdempotencyToken] = None,
    scope_description: Optional[Description] = None,
    is_published: Optional[IsPublished] = None,
    tags: Optional[TagMap] = None,
) -> CreateScopeOutput

Creates a scope. A scope selects the accounts and resources that a deployment applies to. Use isPublished to create the scope in published (ACTIVE) or draft (DRAFT) state.

Parameters:

  • client_token (Optional[IdempotencyToken], default: None ) –

    A unique, case-sensitive token that you provide to ensure that the operation completes no more than one time. If you retry a request with the same client token and the same parameters, the service returns the result of the original successful request.

  • scope_name (ScopeName) –

    The name of the scope.

  • scope_description (Optional[Description], default: None ) –

    A description of the scope.

  • scope_configuration (ScopeConfiguration) –

    The configuration that defines which accounts and resources are in scope.

  • is_published (Optional[IsPublished], default: None ) –

    Specifies whether to publish the resource. When true, the resource is saved in published (ACTIVE) state. When false, it is saved as a draft (DRAFT). Default: true.

  • tags (Optional[TagMap], default: None ) –

    The tags to add to the resource when it is created.

Raises:

  • AccessDeniedException –

    You do not have sufficient permissions to perform this action.

  • ConflictException –

    The request conflicts with the current state of the resource. For example, the resource was modified concurrently, or it is in a state that does not allow the requested operation.

  • InternalServerException –

    The request processing failed because of an internal error in the service. This is a retryable error.

  • ServiceQuotaExceededException –

    The request would exceed a service quota.

  • ServiceUnavailableException –

    The service is temporarily unavailable. This is a retryable error.

  • TagPolicyViolationException –

    The request violates a tag policy that is in effect for the account or organization.

  • ThrottlingException –

    The request was denied because of request throttling. Reduce your request rate and try again.

  • ValidationException –

    The request failed validation. For details, see the reason and fieldList members of the response.

  • UnknownServiceError –

    The service returned an error code this client does not model.

Examples:

Create a scope Creates a new scope in published (ACTIVE) state.

>>> await client.create_scope(client_token='550e8400-e29b-41d4-a716-446655440001', scope_name='production-web-apps', scope_description='Scope covering all production web application resources', scope_configuration={'accountFilter': {'includeAll': {}}, 'resourceScopes': {}}, is_published=True)
Source code in docs_src/capo_network_security_manager/_services/async_network_security_manager.py
async def create_scope(
    self,
    scope_name: "capo_network_security_manager.types.scope_name.ScopeName",
    scope_configuration: "capo_network_security_manager.types.scope_configuration.ScopeConfiguration",
    *,
    config_overrides: Optional[AsyncNetworkSecurityManagerClientConfig] = None,
    client_token: Optional[
        "capo_network_security_manager.types.idempotency_token.IdempotencyToken"
    ] = None,
    scope_description: Optional[
        "capo_network_security_manager.types.description.Description"
    ] = None,
    is_published: Optional[
        "capo_network_security_manager.types.is_published.IsPublished"
    ] = None,
    tags: Optional["capo_network_security_manager.types.tag_map.TagMap"] = None,
) -> "capo_network_security_manager.types.create_scope_output.CreateScopeOutput":
    """<p>Creates a scope. A scope selects the accounts and resources that a deployment applies to. Use <code>isPublished</code> to create the scope in published (<code>ACTIVE</code>) or draft (<code>DRAFT</code>) state.</p>

    Args:
        client_token: <p>A unique, case-sensitive token that you provide to ensure that the operation completes no more than one time. If you retry a request with the same client token and the same parameters, the service returns the result of the original successful request.</p>
        scope_name: <p>The name of the scope.</p>
        scope_description: <p>A description of the scope.</p>
        scope_configuration: <p>The configuration that defines which accounts and resources are in scope.</p>
        is_published: <p>Specifies whether to publish the resource. When <code>true</code>, the resource is saved in published (<code>ACTIVE</code>) state. When <code>false</code>, it is saved as a draft (<code>DRAFT</code>). Default: <code>true</code>.</p>
        tags: <p>The tags to add to the resource when it is created.</p>

    Raises:
        capo_network_security_manager.errors.access_denied_exception.AccessDeniedException: <p>You do not have sufficient permissions to perform this action.</p>
        capo_network_security_manager.errors.conflict_exception.ConflictException: <p>The request conflicts with the current state of the resource. For example, the resource was modified concurrently, or it is in a state that does not allow the requested operation.</p>
        capo_network_security_manager.errors.internal_server_exception.InternalServerException: <p>The request processing failed because of an internal error in the service. This is a retryable error.</p>
        capo_network_security_manager.errors.service_quota_exceeded_exception.ServiceQuotaExceededException: <p>The request would exceed a service quota.</p>
        capo_network_security_manager.errors.service_unavailable_exception.ServiceUnavailableException: <p>The service is temporarily unavailable. This is a retryable error.</p>
        capo_network_security_manager.errors.tag_policy_violation_exception.TagPolicyViolationException: <p>The request violates a tag policy that is in effect for the account or organization.</p>
        capo_network_security_manager.errors.throttling_exception.ThrottlingException: <p>The request was denied because of request throttling. Reduce your request rate and try again.</p>
        capo_network_security_manager.errors.validation_exception.ValidationException: <p>The request failed validation. For details, see the <code>reason</code> and <code>fieldList</code> members of the response.</p>
        capo_network_security_manager.errors.UnknownServiceError: The service returned an error code this client does not model.

    Examples:
        Create a scope
        Creates a new scope in published (ACTIVE) state.

        >>> await client.create_scope(client_token='550e8400-e29b-41d4-a716-446655440001', scope_name='production-web-apps', scope_description='Scope covering all production web application resources', scope_configuration={'accountFilter': {'includeAll': {}}, 'resourceScopes': {}}, is_published=True)
    """

    async def _handler(
        req: "AsyncOperationRequest[capo_network_security_manager.types.create_scope_input.CreateScopeInput]",
    ) -> AsyncOperationResponse[
        "capo_network_security_manager.types.create_scope_output.CreateScopeOutput"
    ]:
        import capo_network_security_manager._operations.piccolo_customer_api_service.create_scope

        (
            output,
            http_response,
        ) = await capo_network_security_manager._operations.piccolo_customer_api_service.create_scope.async_create_scope(
            req.options, req.input
        )
        return AsyncOperationResponse(output=output, response=http_response)

    interceptors_, options_ = self.operation_options(
        config_overrides, OperationLogging("CreateScope")
    )
    input_: capo_network_security_manager.types.create_scope_input.CreateScopeInput = {
        "scope_name": scope_name,
        "scope_configuration": scope_configuration,
    }
    if client_token is None:
        client_token = str(uuid.uuid4())
    input_["client_token"] = client_token
    if scope_description is not None:
        input_["scope_description"] = scope_description
    if is_published is not None:
        input_["is_published"] = is_published
    if tags is not None:
        input_["tags"] = tags

    response = await aexecute_pipeline(
        AsyncOperationRequest(input=input_, options=options_),
        handler=_handler,
        interceptors=list(interceptors_),
    )
    await response.response.aclose()
    return response.output