AmazonSecurityHubClient.StartConfigurationPolicyDisassociation Method (StartConfigurationPolicyDisassociationRequest)

Disassociates a target account, organizational unit, or the root from a specified configuration. When you disassociate a configuration from its target, the target inherits the configuration of the closest parent. If there’s no configuration to inherit, the target retains its settings but becomes a self-managed account. A target can be disassociated from a configuration policy or self-managed behavior. Only the Security Hub delegated administrator can invoke this operation from the home Region.

Note:

For .NET Core this operation is only available in asynchronous form. Please refer to StartConfigurationPolicyDisassociationAsync.

Namespace: Amazon.SecurityHub
Assembly: AWSSDK.SecurityHub.dll
Version: 3.x.y.z

Syntax

public virtual StartConfigurationPolicyDisassociationResponse StartConfigurationPolicyDisassociation(
         StartConfigurationPolicyDisassociationRequest request
)

Parameters

request: Type: Amazon.SecurityHub.Model.StartConfigurationPolicyDisassociationRequest

Container for the necessary parameters to execute the StartConfigurationPolicyDisassociation service method.

Return Value

Type: StartConfigurationPolicyDisassociationResponse

The response from the StartConfigurationPolicyDisassociation service method, as returned by SecurityHub.

Exceptions

Exception	Condition
AccessDeniedException	You don't have permission to perform the action specified in the request.
InternalException	Internal server error.
InvalidAccessException	The account doesn't have permission to perform this action.
InvalidInputException	The request was rejected because you supplied an invalid or out-of-range value for an input parameter.
LimitExceededException	The request was rejected because it attempted to create resources beyond the current Amazon Web Services account or throttling limits. The error code describes the limit exceeded.
ResourceNotFoundException	The request was rejected because we can't find the specified resource.

Examples

This operation disassociates a configuration policy or self-managed behavior from the target account, organizational unit, or the root.

To disassociate a configuration from a target


var client = new AmazonSecurityHubClient();
var response = client.StartConfigurationPolicyDisassociation(new StartConfigurationPolicyDisassociationRequest 
{
    ConfigurationPolicyIdentifier = "SELF_MANAGED_SECURITY_HUB",
    Target = new Target { RootId = "r-f6g7h8i9j0example" }
});

Version Information

.NET Framework:
Supported in: 4.5 and newer, 3.5

AmazonSecurityHubClient.StartConfigurationPolicyDisassociation (StartConfigurationPolicyDisassociationRequest)

Method