删除证书颁发机构 - AWS Private Certificate Authority

本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。

删除证书颁发机构

以下 CloudTrail 示例显示了调用DeleteCertificateAuthority操作的结果。在此示例中,证书颁发机构无法删除,因为它处于 ACTIVE 状态。

{ "eventVersion":"1.05", "userIdentity":{ "type":"IAMUser", "principalId":"account", "arn":"arn:aws:iam::account:user/name", "accountId":"account", "accessKeyId":"key_ID" }, "eventTime":"2018-01-26T22:01:11Z", "eventSource":"acm-pca.amazonaws.com", "eventName":"DeleteCertificateAuthority", "awsRegion":"region", "sourceIPAddress":"IP_address", "userAgent":"agent", "errorCode":"InvalidStateException", "errorMessage":"The certificate authority is not in a valid state for deletion.", "requestParameters":{ "certificateAuthorityArn":"arn:aws:acm-pca:us-east-1:111122223333:certificate-authority/11223344-1234-1122-2233-112233445566" }, "responseElements":null, "requestID":"request_ID", "eventID":"event_ID", "eventType":"AwsApiCall", "recipientAccountId":"account" }