:doc:`SecurityHub <../../securityhub>` / Client / start_configuration_policy_disassociation

*****************************************
start_configuration_policy_disassociation
*****************************************



.. py:method:: SecurityHub.Client.start_configuration_policy_disassociation(**kwargs)

  

  Disassociates a target account, organizational unit, or the root from a specified configuration. When you disassociate a configuration from its target, the target inherits the configuration of the closest parent. If there’s no configuration to inherit, the target retains its settings but becomes a self-managed account. A target can be disassociated from a configuration policy or self-managed behavior. Only the Security Hub delegated administrator can invoke this operation from the home Region.

  

  See also: `AWS API Documentation <https://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/StartConfigurationPolicyDisassociation>`_  


  **Request Syntax**
  ::

    response = client.start_configuration_policy_disassociation(
        Target={
            'AccountId': 'string',
            'OrganizationalUnitId': 'string',
            'RootId': 'string'
        },
        ConfigurationPolicyIdentifier='string'
    )
    
  :type Target: dict
  :param Target: 

    The identifier of the target account, organizational unit, or the root to disassociate from the specified configuration.

    .. note::    This is a Tagged Union structure. Only one of the     following top level keys can be set: ``AccountId``, ``OrganizationalUnitId``, ``RootId``. 

  
    - **AccountId** *(string) --* 

      The Amazon Web Services account ID of the target account.

      

    
    - **OrganizationalUnitId** *(string) --* 

      The organizational unit ID of the target organizational unit.

      

    
    - **RootId** *(string) --* 

      The ID of the organization root.

      

    
  
  :type ConfigurationPolicyIdentifier: string
  :param ConfigurationPolicyIdentifier: **[REQUIRED]** 

    The Amazon Resource Name (ARN) of a configuration policy, the universally unique identifier (UUID) of a configuration policy, or a value of ``SELF_MANAGED_SECURITY_HUB`` for a self-managed configuration.

    

  
  
  :rtype: dict
  :returns: 
    
    **Response Syntax**

    
    ::

      {}
      
    **Response Structure**

    

    - *(dict) --* 
  
  **Exceptions**
  
  *   :py:class:`SecurityHub.Client.exceptions.InternalException`

  
  *   :py:class:`SecurityHub.Client.exceptions.InvalidAccessException`

  
  *   :py:class:`SecurityHub.Client.exceptions.InvalidInputException`

  
  *   :py:class:`SecurityHub.Client.exceptions.LimitExceededException`

  
  *   :py:class:`SecurityHub.Client.exceptions.ResourceNotFoundException`

  
  *   :py:class:`SecurityHub.Client.exceptions.AccessDeniedException`

  