:doc:`IAMRolesAnywhere <../../rolesanywhere>` / Client / import_crl

**********
import_crl
**********



.. py:method:: IAMRolesAnywhere.Client.import_crl(**kwargs)

  

  Imports the certificate revocation list (CRL). A CRL is a list of certificates that have been revoked by the issuing certificate Authority (CA).In order to be properly imported, a CRL must be in PEM format. IAM Roles Anywhere validates against the CRL before issuing credentials.

   

  **Required permissions:** ``rolesanywhere:ImportCrl``.

  

  See also: `AWS API Documentation <https://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/ImportCrl>`_  


  **Request Syntax**
  ::

    response = client.import_crl(
        name='string',
        crlData=b'bytes',
        enabled=True|False,
        tags=[
            {
                'key': 'string',
                'value': 'string'
            },
        ],
        trustAnchorArn='string'
    )
    
  :type name: string
  :param name: **[REQUIRED]** 

    The name of the certificate revocation list (CRL).

    

  
  :type crlData: bytes
  :param crlData: **[REQUIRED]** 

    The x509 v3 specified certificate revocation list (CRL).

    

  
  :type enabled: boolean
  :param enabled: 

    Specifies whether the certificate revocation list (CRL) is enabled.

    

  
  :type tags: list
  :param tags: 

    A list of tags to attach to the certificate revocation list (CRL).

    

  
    - *(dict) --* 

      A label that consists of a key and value you define.

      

    
      - **key** *(string) --* **[REQUIRED]** 

        The tag key.

        

      
      - **value** *(string) --* **[REQUIRED]** 

        The tag value.

        

      
    

  :type trustAnchorArn: string
  :param trustAnchorArn: **[REQUIRED]** 

    The ARN of the TrustAnchor the certificate revocation list (CRL) will provide revocation for.

    

  
  
  :rtype: dict
  :returns: 
    
    **Response Syntax**

    
    ::

      {
          'crl': {
              'crlId': 'string',
              'crlArn': 'string',
              'name': 'string',
              'enabled': True|False,
              'crlData': b'bytes',
              'trustAnchorArn': 'string',
              'createdAt': datetime(2015, 1, 1),
              'updatedAt': datetime(2015, 1, 1)
          }
      }
      
    **Response Structure**

    

    - *(dict) --* 
      

      - **crl** *(dict) --* 

        The state of the certificate revocation list (CRL) after a read or write operation.

        
        

        - **crlId** *(string) --* 

          The unique identifier of the certificate revocation list (CRL).

          
        

        - **crlArn** *(string) --* 

          The ARN of the certificate revocation list (CRL).

          
        

        - **name** *(string) --* 

          The name of the certificate revocation list (CRL).

          
        

        - **enabled** *(boolean) --* 

          Indicates whether the certificate revocation list (CRL) is enabled.

          
        

        - **crlData** *(bytes) --* 

          The state of the certificate revocation list (CRL) after a read or write operation.

          
        

        - **trustAnchorArn** *(string) --* 

          The ARN of the TrustAnchor the certificate revocation list (CRL) will provide revocation for.

          
        

        - **createdAt** *(datetime) --* 

          The ISO-8601 timestamp when the certificate revocation list (CRL) was created.

          
        

        - **updatedAt** *(datetime) --* 

          The ISO-8601 timestamp when the certificate revocation list (CRL) was last updated.

          
    
  
  **Exceptions**
  
  *   :py:class:`IAMRolesAnywhere.Client.exceptions.ValidationException`

  
  *   :py:class:`IAMRolesAnywhere.Client.exceptions.AccessDeniedException`

  