View Source aws_pca_connector_ad (aws v1.0.4)
Amazon Web Services Private CA Connector for Active Directory creates a connector between Amazon Web Services Private CA and Active Directory (AD) that enables you to provision security certificates for AD signed by a private CA that you own.
For more information, see Amazon Web Services Private CA Connector for Active Directory: https://docs.aws.amazon.com/privateca/latest/userguide/ad-connector.html.Summary
Functions
Creates a connector between Amazon Web Services Private CA and an Active Directory.
Creates a directory registration that authorizes communication between Amazon Web Services Private CA and an Active Directory
Creates a service principal name (SPN) for the service account in Active Directory.
Creates an Active Directory compatible certificate template.
Create a group access control entry.
Deletes a connector for Active Directory.
Deletes a directory registration.
Deletes the service principal name (SPN) used by a connector to authenticate with your Active Directory.
Deletes a template.
Deletes a group access control entry.
Lists information about your connector.
A structure that contains information about your directory registration.
Lists the service principal name that the connector uses to authenticate with Active Directory.
Retrieves a certificate template that the connector uses to issue certificates from a private CA.
Retrieves the group access control entries for a template.
Lists the connectors that you created by using the https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateConnector action.
Lists the directory registrations that you created by using the https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateDirectoryRegistration action.
Lists the service principal names that the connector uses to authenticate with Active Directory.
Lists the tags, if any, that are associated with your resource.
Lists group access control entries you created.
Lists the templates, if any, that are associated with a connector.
Adds one or more tags to your resource.
Removes one or more tags from your resource.
Update template configuration to define the information included in certificates.
Update a group access control entry you created using CreateTemplateGroupAccessControlEntry: https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateTemplateGroupAccessControlEntry.html.
Functions
Creates a connector between Amazon Web Services Private CA and an Active Directory.
You must specify the private CA, directory ID, and security groups.
Link to this function
create_service_principal_name(Client, ConnectorArn, DirectoryRegistrationArn, Input)
View SourceCreates a service principal name (SPN) for the service account in Active Directory.
Kerberos authentication uses SPNs to associate a service instance with a service sign-in account.
Link to this function
create_service_principal_name(Client, ConnectorArn, DirectoryRegistrationArn, Input0, Options0)
View SourceCreates an Active Directory compatible certificate template.
The connectors issues certificates using these templates based on the requester’s Active Directory group membership.
Link to this function
create_template_group_access_control_entry(Client, TemplateArn, Input)
View SourceCreate a group access control entry.
Allow or deny Active Directory groups from enrolling and/or autoenrolling with the template based on the group security identifiers (SIDs).
Link to this function
create_template_group_access_control_entry(Client, TemplateArn, Input0, Options0)
View SourceDeletes a connector for Active Directory.
You must provide the Amazon Resource Name (ARN) of the connector that you want to delete. You can find the ARN by calling the https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_ListConnectors action. Deleting a connector does not deregister your directory with Amazon Web Services Private CA. You can deregister your directory by calling the https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_DeleteDirectoryRegistration action.
Link to this function
delete_directory_registration(Client, DirectoryRegistrationArn, Input)
View SourceDeletes a directory registration.
Deleting a directory registration deauthorizes Amazon Web Services Private CA with the directory.
Link to this function
delete_directory_registration(Client, DirectoryRegistrationArn, Input0, Options0)
View Source
Link to this function
delete_service_principal_name(Client, ConnectorArn, DirectoryRegistrationArn, Input)
View Source
Link to this function
delete_service_principal_name(Client, ConnectorArn, DirectoryRegistrationArn, Input0, Options0)
View SourceDeletes a template.
Certificates issued using the template are still valid until they are revoked or expired.
Link to this function
delete_template_group_access_control_entry(Client, GroupSecurityIdentifier, TemplateArn, Input)
View Source
Link to this function
delete_template_group_access_control_entry(Client, GroupSecurityIdentifier, TemplateArn, Input0, Options0)
View SourceLists information about your connector.
You specify the connector on input by its ARN (Amazon Resource Name).
Link to this function
get_connector(Client, ConnectorArn, QueryMap, HeadersMap, Options0)
View Source
Link to this function
get_directory_registration(Client, DirectoryRegistrationArn, QueryMap, HeadersMap)
View Source
Link to this function
get_directory_registration(Client, DirectoryRegistrationArn, QueryMap, HeadersMap, Options0)
View Source
Link to this function
get_service_principal_name(Client, ConnectorArn, DirectoryRegistrationArn)
View Source
Link to this function
get_service_principal_name(Client, ConnectorArn, DirectoryRegistrationArn, QueryMap, HeadersMap)
View Source
Link to this function
get_service_principal_name(Client, ConnectorArn, DirectoryRegistrationArn, QueryMap, HeadersMap, Options0)
View Source
Link to this function
get_template_group_access_control_entry(Client, GroupSecurityIdentifier, TemplateArn)
View Source
Link to this function
get_template_group_access_control_entry(Client, GroupSecurityIdentifier, TemplateArn, QueryMap, HeadersMap)
View Source
Link to this function
get_template_group_access_control_entry(Client, GroupSecurityIdentifier, TemplateArn, QueryMap, HeadersMap, Options0)
View Source
Link to this function
list_directory_registrations(Client, QueryMap, HeadersMap, Options0)
View Source
Link to this function
list_service_principal_names(Client, DirectoryRegistrationArn, QueryMap, HeadersMap)
View Source
Link to this function
list_service_principal_names(Client, DirectoryRegistrationArn, QueryMap, HeadersMap, Options0)
View Source
Link to this function
list_tags_for_resource(Client, ResourceArn, QueryMap, HeadersMap, Options0)
View Source
Link to this function
list_template_group_access_control_entries(Client, TemplateArn, QueryMap, HeadersMap)
View Source
Link to this function
list_template_group_access_control_entries(Client, TemplateArn, QueryMap, HeadersMap, Options0)
View Source
Link to this function
list_templates(Client, ConnectorArn, QueryMap, HeadersMap, Options0)
View Source
Link to this function
update_template_group_access_control_entry(Client, GroupSecurityIdentifier, TemplateArn, Input)
View Source
Link to this function