Retrieves the revocation status for a signed artifact by checking if the signing profile, job, or certificate has been revoked.
Parameters:
-
signature_timestamp
(datetime)
–
The timestamp when the artifact was signed, in ISO 8601 format.
-
platform_id
(PlatformId)
–
The platform identifier for the signing platform used.
-
profile_version_arn
(Arn)
–
The ARN of the signing profile version used to sign the artifact.
-
job_arn
(Arn)
–
The ARN of the signing job that produced the signature.
-
certificate_hashes
(CertificateHashes)
–
List of certificate hashes to check for revocation.
Raises:
Examples:
Check revocation status for a signed artifact
Checks if a signing profile, job, or certificate has been revoked for a given artifact.
>>> client.get_revocation_status(signature_timestamp=1700000000, platform_id='Notation-OCI-SHA384-ECDSA', profile_version_arn='arn:aws:signer:us-east-1:123456789012:/signing-profiles/my-profile/v1', job_arn='arn:aws:signer:us-east-1:123456789012:/signing-jobs/my-job-id', certificate_hashes=['e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855'])
Source code in docs_src/capo_signer_data/_services/signer_data.py
| def get_revocation_status(
self,
signature_timestamp: datetime.datetime,
platform_id: "capo_signer_data.types.platform_id.PlatformId",
profile_version_arn: "capo_signer_data.types.arn.Arn",
job_arn: "capo_signer_data.types.arn.Arn",
certificate_hashes: "capo_signer_data.types.certificate_hashes.CertificateHashes",
*,
config_overrides: Optional[SignerDataClientConfig] = None,
) -> "capo_signer_data.types.get_revocation_status_response.GetRevocationStatusResponse":
"""<p>Retrieves the revocation status for a signed artifact by checking if the signing profile, job, or certificate has been revoked.</p>
Args:
signature_timestamp: <p>The timestamp when the artifact was signed, in ISO 8601 format.</p>
platform_id: <p>The platform identifier for the signing platform used.</p>
profile_version_arn: <p>The ARN of the signing profile version used to sign the artifact.</p>
job_arn: <p>The ARN of the signing job that produced the signature.</p>
certificate_hashes: <p>List of certificate hashes to check for revocation.</p>
Raises:
capo_signer_data.errors.access_denied_exception.AccessDeniedException: <p>You do not have sufficient permissions to perform this action.</p>
capo_signer_data.errors.internal_service_error_exception.InternalServiceErrorException: <p>An internal service error occurred.</p>
capo_signer_data.errors.too_many_requests_exception.TooManyRequestsException: <p>The request was denied due to request throttling.</p>
capo_signer_data.errors.validation_exception.ValidationException: <p>The request contains invalid parameters or is malformed.</p>
capo_signer_data.errors.UnknownServiceError: The service returned an error code this client does not model.
Examples:
Check revocation status for a signed artifact
Checks if a signing profile, job, or certificate has been revoked for a given artifact.
>>> client.get_revocation_status(signature_timestamp=1700000000, platform_id='Notation-OCI-SHA384-ECDSA', profile_version_arn='arn:aws:signer:us-east-1:123456789012:/signing-profiles/my-profile/v1', job_arn='arn:aws:signer:us-east-1:123456789012:/signing-jobs/my-job-id', certificate_hashes=['e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855'])
"""
def _handler(
req: "OperationRequest[capo_signer_data.types.get_revocation_status_request.GetRevocationStatusRequest]",
) -> OperationResponse[
"capo_signer_data.types.get_revocation_status_response.GetRevocationStatusResponse"
]:
import capo_signer_data._operations.signer_data_plane.get_revocation_status
output, http_response = (
capo_signer_data._operations.signer_data_plane.get_revocation_status.get_revocation_status(
req.options, req.input
)
)
return OperationResponse(output=output, response=http_response)
interceptors_, options_ = self.operation_options(
config_overrides, OperationLogging("GetRevocationStatus")
)
input_: capo_signer_data.types.get_revocation_status_request.GetRevocationStatusRequest = {
"signature_timestamp": signature_timestamp,
"platform_id": platform_id,
"profile_version_arn": profile_version_arn,
"job_arn": job_arn,
"certificate_hashes": certificate_hashes,
}
response = execute_pipeline(
OperationRequest(input=input_, options=options_),
handler=_handler,
interceptors=list(interceptors_),
)
response.response.close()
return response.output
|