:doc:`ControlTower <../../controltower>` / Client / disable_control

***************
disable_control
***************



.. py:method:: ControlTower.Client.disable_control(**kwargs)

  

  This API call turns off a control. It starts an asynchronous operation that deletes Amazon Web Services resources on the specified organizational unit and the accounts it contains. The resources will vary according to the control that you specify. For usage examples, see the `Controls Reference Guide <https://docs.aws.amazon.com/controltower/latest/controlreference/control-api-examples-short.html>`__.

  

  See also: `AWS API Documentation <https://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/DisableControl>`_  


  **Request Syntax**
  ::

    response = client.disable_control(
        controlIdentifier='string',
        targetIdentifier='string',
        enabledControlIdentifier='string'
    )
    
  :type controlIdentifier: string
  :param controlIdentifier: 

    The ARN of the control. Only **Strongly recommended** and **Elective** controls are permitted, with the exception of the **Region deny** control. For information on how to find the ``controlIdentifier``, see `the overview page <https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html>`__.

    

  
  :type targetIdentifier: string
  :param targetIdentifier: 

    The ARN of the organizational unit. For information on how to find the ``targetIdentifier``, see `the overview page <https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html>`__.

    

  
  :type enabledControlIdentifier: string
  :param enabledControlIdentifier: 

    The ARN of the enabled control to be disabled, which uniquely identifies the control instance on the target organizational unit.

    

  
  
  :rtype: dict
  :returns: 
    
    **Response Syntax**

    
    ::

      {
          'operationIdentifier': 'string'
      }
      
    **Response Structure**

    

    - *(dict) --* 
      

      - **operationIdentifier** *(string) --* 

        The ID of the asynchronous operation, which is used to track status. The operation is available for 90 days.

        
  
  **Exceptions**
  
  *   :py:class:`ControlTower.Client.exceptions.ConflictException`

  
  *   :py:class:`ControlTower.Client.exceptions.ValidationException`

  
  *   :py:class:`ControlTower.Client.exceptions.ServiceQuotaExceededException`

  
  *   :py:class:`ControlTower.Client.exceptions.InternalServerException`

  
  *   :py:class:`ControlTower.Client.exceptions.AccessDeniedException`

  
  *   :py:class:`ControlTower.Client.exceptions.ResourceNotFoundException`

  
  *   :py:class:`ControlTower.Client.exceptions.ThrottlingException`

  