UpdateTrustAnchor - IAM Roles Anywhere
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).


Updates a trust anchor. You establish trust between IAM Roles Anywhere and your certificate authority (CA) by configuring a trust anchor. You can define a trust anchor as a reference to an Amazon Private Certificate Authority (Amazon Private CA) or by uploading a CA certificate. Your Amazon workloads can authenticate with the trust anchor using certificates issued by the CA in exchange for temporary Amazon credentials.


Amazon Private Certificate Authority is not supported in your region. It cannot be used as a reference to define a trust anchor.

Required permissions: rolesanywhere:UpdateTrustAnchor.

Request Syntax

PATCH /trustanchor/trustAnchorId HTTP/1.1 Content-type: application/json { "name": "string", "source": { "sourceData": { ... }, "sourceType": "string" } }

URI Request Parameters

The request uses the following URI parameters.


The unique identifier of the trust anchor.

Length Constraints: Fixed length of 36.

Pattern: [a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}

Required: Yes

Request Body

The request accepts the following data in JSON format.


The name of the trust anchor.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 255.

Pattern: ^[ a-zA-Z0-9-_]*$

Required: No


The trust anchor type and its related certificate data.

Type: Source object

Required: No

Response Syntax

HTTP/1.1 200 Content-type: application/json { "trustAnchor": { "createdAt": "string", "enabled": boolean, "name": "string", "notificationSettings": [ { "channel": "string", "configuredBy": "string", "enabled": boolean, "event": "string", "threshold": number } ], "source": { "sourceData": { ... }, "sourceType": "string" }, "trustAnchorArn": "string", "trustAnchorId": "string", "updatedAt": "string" } }

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.


The state of the trust anchor after a read or write operation.

Type: TrustAnchorDetail object


For information about the errors that are common to all actions, see Common Errors.


You do not have sufficient access to perform this action.

HTTP Status Code: 403


The resource could not be found.

HTTP Status Code: 404


Validation exception error.

HTTP Status Code: 400

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: