UpdateLedger
Updates properties on a ledger.
Request Syntax
PATCH /ledgers/name
HTTP/1.1
Content-type: application/json
{
"DeletionProtection": boolean
,
"KmsKey": "string
"
}
URI Request Parameters
The request uses the following URI parameters.
- name
-
The name of the ledger.
Length Constraints: Minimum length of 1. Maximum length of 32.
Pattern:
(?!^.*--)(?!^[0-9]+$)(?!^-)(?!.*-$)^[A-Za-z0-9-]+$
Required: Yes
Request Body
The request accepts the following data in JSON format.
- DeletionProtection
-
Specifies whether the ledger is protected from being deleted by any user. If not defined during ledger creation, this feature is enabled (
true
) by default.If deletion protection is enabled, you must first disable it before you can delete the ledger. You can disable it by calling the
UpdateLedger
operation to set this parameter tofalse
.Type: Boolean
Required: No
- KmsKey
-
The key in AWS Key Management Service (AWS KMS) to use for encryption of data at rest in the ledger. For more information, see Encryption at rest in the Amazon QLDB Developer Guide.
Use one of the following options to specify this parameter:
-
AWS_OWNED_KMS_KEY
: Use an AWS KMS key that is owned and managed by AWS on your behalf. -
Undefined: Make no changes to the KMS key of the ledger.
-
A valid symmetric customer managed KMS key: Use the specified symmetric encryption KMS key in your account that you create, own, and manage.
Amazon QLDB does not support asymmetric keys. For more information, see Using symmetric and asymmetric keys in the AWS Key Management Service Developer Guide.
To specify a customer managed KMS key, you can use its key ID, Amazon Resource Name (ARN), alias name, or alias ARN. When using an alias name, prefix it with
"alias/"
. To specify a key in a different AWS account, you must use the key ARN or alias ARN.For example:
-
Key ID:
1234abcd-12ab-34cd-56ef-1234567890ab
-
Key ARN:
arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
-
Alias name:
alias/ExampleAlias
-
Alias ARN:
arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias
For more information, see Key identifiers (KeyId) in the AWS Key Management Service Developer Guide.
Type: String
Length Constraints: Maximum length of 1600.
Required: No
-
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"Arn": "string",
"CreationDateTime": number,
"DeletionProtection": boolean,
"EncryptionDescription": {
"EncryptionStatus": "string",
"InaccessibleKmsKeyDateTime": number,
"KmsKeyArn": "string"
},
"Name": "string",
"State": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
The following data is returned in JSON format by the service.
- Arn
-
The Amazon Resource Name (ARN) for the ledger.
Type: String
Length Constraints: Minimum length of 20. Maximum length of 1600.
- CreationDateTime
-
The date and time, in epoch time format, when the ledger was created. (Epoch time format is the number of seconds elapsed since 12:00:00 AM January 1, 1970 UTC.)
Type: Timestamp
- DeletionProtection
-
Specifies whether the ledger is protected from being deleted by any user. If not defined during ledger creation, this feature is enabled (
true
) by default.If deletion protection is enabled, you must first disable it before you can delete the ledger. You can disable it by calling the
UpdateLedger
operation to set this parameter tofalse
.Type: Boolean
- EncryptionDescription
-
Information about the encryption of data at rest in the ledger. This includes the current status, the AWS KMS key, and when the key became inaccessible (in the case of an error).
Type: LedgerEncryptionDescription object
- Name
-
The name of the ledger.
Type: String
Length Constraints: Minimum length of 1. Maximum length of 32.
Pattern:
(?!^.*--)(?!^[0-9]+$)(?!^-)(?!.*-$)^[A-Za-z0-9-]+$
- State
-
The current status of the ledger.
Type: String
Valid Values:
CREATING | ACTIVE | DELETING | DELETED
Errors
For information about the errors that are common to all actions, see Common Errors.
- InvalidParameterException
-
One or more parameters in the request aren't valid.
HTTP Status Code: 400
- ResourceNotFoundException
-
The specified resource doesn't exist.
HTTP Status Code: 404
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: