v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1425141133.8 KB

Create a group access control entry. Allow or deny Active Directory groups from enrolling and/or autoenrolling with the template based on the group security identifiers (SIDs).

post/templates/{TemplateArn}/accessControlEntries

Path parameters

TemplateArnstring required

The Amazon Resource Name (ARN) that was returned when you called <a href="https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateTemplate.html">CreateTemplate</a>.

Request body

ClientTokenstring

Idempotency token.

GroupDisplayNamestring required

Name of the Active Directory group. This name does not need to match the group name in Active Directory.

GroupSecurityIdentifierstring required

Security identifier (SID) of the group object from Active Directory. The SID starts with "S-".

Response

Success