/audit/suppressions/update

Updates a Device Defender audit suppression.

curl --location -g --request PATCH 'https://api.iotwireless.{region}.amazonaws.com/audit/suppressions/update' \ --header 'Content-Type: application/json' \ --data-raw '{ "checkName": "string", "resourceIdentifier": { "deviceCertificateId": "string", "caCertificateId": "string", "cognitoIdentityPoolId": "string", "clientId": "string", "policyVersionIdentifier": { "policyName": "string", "policyVersionId": "string" }, "account": "string", "iamRoleArn": "string", "roleAliasArn": "string" }, "expirationDate": "2019-08-24T14:15:22Z", "suppressIndefinitely": true, "description": "string" }'

Request

Body Params application/json

checkName

string

required

An audit check name. Checks must be enabled for your account. (Use DescribeAccountAuditConfiguration to see the list of all checks, including those that are enabled or use UpdateAccountAuditConfiguration to select which checks are enabled.)

resourceIdentifier

object

required

Information that identifies the noncompliant resource.

deviceCertificateId

string

optional

The ID of the certificate attached to the resource.

>= 64 characters<= 64 characters

Match pattern:

(0x)?[a-fA-F0-9]+

caCertificateId

string

optional

The ID of the CA certificate used to authorize the certificate.

>= 64 characters<= 64 characters

Match pattern:

(0x)?[a-fA-F0-9]+

cognitoIdentityPoolId

string

optional

The ID of the Amazon Cognito identity pool.

clientId

string

optional

The client ID.

policyVersionIdentifier

object

optional

The version of the policy associated with the resource.

account

string

optional

The account with which the resource is associated.

>= 12 characters<= 12 characters

Match pattern:

[0-9]+

iamRoleArn

string

optional

The ARN of the IAM role that has overly permissive actions.

>= 20 characters<= 2048 characters

roleAliasArn

string

optional

The ARN of the role alias that has overly permissive actions.

>= 1 characters<= 2048 characters

expirationDate

string <date-time>

optional

The expiration date (epoch timestamp in seconds) that you want the suppression to adhere to.

suppressIndefinitely

boolean

optional

Indicates whether a suppression should exist indefinitely or not.

description

string

optional

The description of the audit suppression.

<= 1000 characters

Match pattern:

[\p{Graph}\x20]*

Examples

Request

Responses