AWS Documentation » AWS Identity and Access Management » CLI Reference » Commands » iam-usermodcert	« Previous Next »
	Did this page help you? Yes \| No \| Tell us about it...

iam-usermodcert

Description

Changes the status of the specified signing certificate from active to inactive, or vice versa. This action lets you rotate a user's certificates, or immediately disable (or re enable) a user's ability to make API calls to AWS. For information about rotating certificates, go to Managing Keys and Certificates in Using IAM.

Syntax

iam-usermodcert [-u USERNAME] -c CERTIFICATEID -s Active|Inactive

Options

Name Description Required

Name	Description	Required
`-u` `USERNAME`	Name of the user whose certificate you want to update. Type: String Default: None	Optional
`-c` `CERTIFICATEID`	The ID of the signing certificate you want to update. Type: String Default: None	Yes
`-s Active\|Inactive`	The status you want to assign to the certificate. `Active` means the user can use the certificate for API calls to AWS. `Inactive` means the user cannot use the certificate for API calls to AWS. Type: String	Yes

-u USERNAME

Name of the user whose certificate you want to update.

Type: String

Default: None

Optional

-c CERTIFICATEID

The ID of the signing certificate you want to update.

Type: String

Default: None

Yes

-s Active|Inactive

The status you want to assign to the certificate. Active means the user can use the certificate for API calls to AWS. Inactive means the user cannot use the certificate for API calls to AWS.

Type: String

Yes

Output

If the certificate is successfully updated, the output is empty.

Examples

The following example changes the status to Inactive for the certificate ID TA7SMP42TDN5Z26OBPJE7EXAMPLE, which belongs to the user named Bob.

PROMPT> iam-usermodcert -u Bob -c TA7SMP42TDN5Z26OBPJE7EXAMPLE -s Inactive

Related Commands

Document Conventions	« Previous Next »
Terms of Use	Did this page help you? Yes \| No \| Tell us about it...