CreateTrustAnchor
Creates a trust anchor to establish trust between IAM Roles Anywhere and your certificate authority (CA). You can define a trust anchor as a reference to an Amazon Private Certificate Authority (Amazon Private CA) or by uploading a CA certificate. Your Amazon workloads can authenticate with the trust anchor using certificates issued by the CA in exchange for temporary Amazon credentials.
Note
Amazon Private Certificate Authority is not supported in your region. It cannot be used as a reference to define a trust anchor.
Required permissions:
rolesanywhere:CreateTrustAnchor
.
Request Syntax
POST /trustanchors HTTP/1.1
Content-type: application/json
{
"enabled": boolean
,
"name": "string
",
"notificationSettings": [
{
"channel": "string
",
"enabled": boolean
,
"event": "string
",
"threshold": number
}
],
"source": {
"sourceData": { ... },
"sourceType": "string
"
},
"tags": [
{
"key": "string
",
"value": "string
"
}
]
}
URI Request Parameters
The request does not use any URI parameters.
Request Body
The request accepts the following data in JSON format.
- enabled
-
Specifies whether the trust anchor is enabled.
Type: Boolean
Required: No
- name
-
The name of the trust anchor.
Type: String
Length Constraints: Minimum length of 1. Maximum length of 255.
Pattern:
^[ a-zA-Z0-9-_]*$
Required: Yes
- notificationSettings
-
A list of notification settings to be associated to the trust anchor.
Type: Array of NotificationSetting objects
Array Members: Minimum number of 0 items. Maximum number of 50 items.
Required: No
- source
-
The trust anchor type and its related certificate data.
Type: Source object
Required: Yes
-
The tags to attach to the trust anchor.
Type: Array of Tag objects
Array Members: Minimum number of 0 items. Maximum number of 200 items.
Required: No
Response Syntax
HTTP/1.1 201
Content-type: application/json
{
"trustAnchor": {
"createdAt": "string",
"enabled": boolean,
"name": "string",
"notificationSettings": [
{
"channel": "string",
"configuredBy": "string",
"enabled": boolean,
"event": "string",
"threshold": number
}
],
"source": {
"sourceData": { ... },
"sourceType": "string"
},
"trustAnchorArn": "string",
"trustAnchorId": "string",
"updatedAt": "string"
}
}
Response Elements
If the action is successful, the service sends back an HTTP 201 response.
The following data is returned in JSON format by the service.
- trustAnchor
-
The state of the trust anchor after a read or write operation.
Type: TrustAnchorDetail object
Errors
For information about the errors that are common to all actions, see Common Errors.
- AccessDeniedException
-
You do not have sufficient access to perform this action.
HTTP Status Code: 403
- ValidationException
-
Validation exception error.
HTTP Status Code: 400
See Also
For more information about using this API in one of the language-specific Amazon SDKs, see the following: