EC2 / Client / enable_ipam_internet_registry_association

enable_ipam_internet_registry_association

EC2.Client.enable_ipam_internet_registry_association(**kwargs)

Enables Resource Public Key Infrastructure (RPKI) on an existing IPAM internet registry association by providing BGP Public Key Infrastructure (BPKI) certificate details. After enabling, you can create Route Origin Authorizations (ROAs) for prefixes registered with the internet registry.

See also: AWS API Documentation

Request Syntax

response = client.enable_ipam_internet_registry_association(
    DryRun=True|False,
    IpamInternetRegistryAssociationId='string',
    RpkiVersion='string',
    ServiceUri='string',
    ChildHandle='string',
    ParentHandle='string',
    ParentBpkiTa='string',
    ClientToken='string'
)

Parameters:

• DryRun (boolean) – Checks whether you have the required permissions for the operation, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

• IpamInternetRegistryAssociationId (string) –

  [REQUIRED]

  The ID of the IPAM internet registry association to enable.

• RpkiVersion (string) –

  [REQUIRED]

  The RPKI version to use from the Parent Response XML.

• ServiceUri (string) –

  [REQUIRED]

  The RPKI service URI for the publication point from the Parent Response XML.

• ChildHandle (string) –

  [REQUIRED]

  The child handle for the BPKI certificate hierarchy from the Parent Response XML.

• ParentHandle (string) –

  [REQUIRED]

  The parent handle for the BPKI certificate hierarchy from the Parent Response XML.

• ParentBpkiTa (string) –

  [REQUIRED]

  The parent BPKI Trust Anchor certificate in PEM format from the Parent Response XML.

• ClientToken (string) –

  A unique, case-sensitive identifier to ensure that the operation completes no more than one time. If this token matches a previous request, the operation ignores the request, but does not return an error.

  This field is autopopulated if not provided.

Return type:

dict

Returns:

Response Syntax

{
    'IpamInternetRegistryAssociation': {
        'OwnerId': 'string',
        'IpamInternetRegistryAssociationId': 'string',
        'IpamInternetRegistryAssociationArn': 'string',
        'IpamId': 'string',
        'IpamRegion': 'string',
        'Rir': 'ripe'|'apnic'|'arin'|'lacnic',
        'OrganizationHandle': 'string',
        'Description': 'string',
        'State': 'pending-enable'|'create-in-progress'|'create-failed'|'enable-in-progress'|'enable-complete'|'enable-failed'|'delete-in-progress'|'delete-complete'|'delete-failed',
        'ChildRequestXml': 'string',
        'Tags': [
            {
                'Key': 'string',
                'Value': 'string'
            },
        ]
    }
}

Response Structure

• (dict) –

  • IpamInternetRegistryAssociation (dict) –

    Information about the enabled internet registry association.

    • OwnerId (string) –

      The ID of the Amazon Web Services account that owns the internet registry association.

    • IpamInternetRegistryAssociationId (string) –

      The ID of the internet registry association.

    • IpamInternetRegistryAssociationArn (string) –

      The Amazon Resource Name (ARN) of the internet registry association.

    • IpamId (string) –

      The ID of the associated IPAM.

    • IpamRegion (string) –

      The Amazon Web Services Region of the IPAM.

    • Rir (string) –

      The Regional Internet Registry. Possible values:

      • ripe - RIPE NCC (Europe, the Middle East, and Central Asia).

      • apnic - APNIC (Asia Pacific).

      • arin - ARIN (North America).

      • lacnic - LACNIC (Latin America and the Caribbean).

    • OrganizationHandle (string) –

      The organization handle at the internet registry.

    • Description (string) –

      The description of the internet registry association.

    • State (string) –

      The state of the internet registry association. Valid values: pending-activation | pending-enable | create-in-progress | create-failed | enable-in-progress | enable-complete | enable-failed | delete-in-progress | delete-complete | delete-failed.

    • ChildRequestXml (string) –

      The XML content for the child request to be submitted to the internet registry to complete the BPKI setup.

    • Tags (list) –

      The tags assigned to the internet registry association.

      • (dict) –

        Describes a tag.

        • Key (string) –

          The key of the tag.

          Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws:.

        • Value (string) –

          The value of the tag.

          Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters.