---
title: "POST /#X-Amz-Target=PaymentCryptographyControlPlane.AssociateMpaTeam"
method: POST
path: "/#X-Amz-Target=PaymentCryptographyControlPlane.AssociateMpaTeam"
---

# POST /#X-Amz-Target=PaymentCryptographyControlPlane.AssociateMpaTeam

`POST /#X-Amz-Target=PaymentCryptographyControlPlane.AssociateMpaTeam`

Associates a Multi-Party Approval (MPA) team with a protected operation. For more information, see [Multi-Party Approval](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/mpa.html) in the _Amazon Web Services Payment Cryptography User Guide._

**Cross-account use:** This operation can't be used across different Amazon Web Services accounts.

**Related operations:**

*   [DisassociateMpaTeam](https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_DisassociateMpaTeam.html)
    
*   [GetMpaTeamAssociation](https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetMpaTeamAssociation.html)

## Headers

- `X-Amz-Target` 'PaymentCryptographyControlPlane.AssociateMpaTeam', required

## Request body

- AssociateMpaTeamInput
  - `Action` 'IMPORT_ROOT_PUBLIC_KEY_CERTIFICATE', required — The protected operation to associate with the MPA team. Currently, the only supported value is <code>IMPORT_ROOT_PUBLIC_KEY_CERTIFICATE</code>.
  - `MpaTeamArn` string, required — The ARN of the MPA team to associate with the protected operation.
  - `RequesterComment` string, password — <p>The comment from the requester explaining the reason for the association.</p> <important> <p>Don't include personal, confidential or sensitive information in this field. This field may be displayed in plaintext in CloudTrail logs and other output.</p> </important>

## Response `200`

Success

- AssociateMpaTeamOutput
  - `MpaTeamAssociation` object, required — The details of the MPA team association.
    - `Action` 'IMPORT_ROOT_PUBLIC_KEY_CERTIFICATE', required — The protected operation associated with the MPA team.
    - `MpaTeamArn` string, required — The ARN of the MPA team.
    - `AssociationState` 'ACTIVE' | 'UPDATE_PENDING' | 'DELETE_PENDING', required — The state of the MPA team association.
    - `MpaStatus` object — The MPA session status for the association, if applicable.
      - `MpaSessionArn` string, required — The ARN of the MPA session.
      - `Status` 'PENDING' | 'APPROVED' | 'FAILED' | 'CANCELLED', required — The current status of the MPA session.
      - `InitiationDate` string, date-time, required — The date and time when the MPA session was initiated.
      - `StatusMessage` string — The message providing additional information about the MPA session status.

## Other responses

- `480` — ServiceQuotaExceededException
- `481` — ServiceUnavailableException
- `482` — ValidationException
- `483` — ConflictException
- `484` — AccessDeniedException
- `485` — ResourceNotFoundException
- `486` — ThrottlingException
- `487` — InternalServerException

---

[API](https://skmtc.net/aws/apis/payment-cryptography.md) · [All operations](https://skmtc.net/aws/apis/payment-cryptography/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/payment-cryptography/versions/1b0b83160e8d/schema)