GetCrl - IAM Roles Anywhere
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).


Gets a certificate revocation list (CRL).

Required permissions: rolesanywhere:GetCrl.

Request Syntax

GET /crl/crlId HTTP/1.1

URI Request Parameters

The request uses the following URI parameters.


The unique identifier of the certificate revocation list (CRL).

Length Constraints: Fixed length of 36.

Pattern: [a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}

Required: Yes

Request Body

The request does not have a request body.

Response Syntax

HTTP/1.1 200 Content-type: application/json { "crl": { "createdAt": "string", "crlArn": "string", "crlData": blob, "crlId": "string", "enabled": boolean, "name": "string", "trustAnchorArn": "string", "updatedAt": "string" } }

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.


The state of the certificate revocation list (CRL) after a read or write operation.

Type: CrlDetail object


For information about the errors that are common to all actions, see Common Errors.


The resource could not be found.

HTTP Status Code: 404

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: