create_trust

create_trust(**kwargs)

Directory Service for Microsoft Active Directory allows you to configure trust relationships. For example, you can establish a trust between your Managed Microsoft AD directory, and your existing self-managed Microsoft Active Directory. This would allow you to provide users and groups access to resources in either domain, with a single set of credentials.

This action initiates the creation of the Amazon Web Services side of a trust relationship between an Managed Microsoft AD directory and an external domain. You can create either a forest trust or an external trust.

See also: AWS API Documentation

Request Syntax

response = client.create_trust(
    DirectoryId='string',
    RemoteDomainName='string',
    TrustPassword='string',
    TrustDirection='One-Way: Outgoing'|'One-Way: Incoming'|'Two-Way',
    TrustType='Forest'|'External',
    ConditionalForwarderIpAddrs=[
        'string',
    ],
    SelectiveAuth='Enabled'|'Disabled'
)

Parameters

• DirectoryId (string) --

  [REQUIRED]

  The Directory ID of the Managed Microsoft AD directory for which to establish the trust relationship.

• RemoteDomainName (string) --

  [REQUIRED]

  The Fully Qualified Domain Name (FQDN) of the external domain for which to create the trust relationship.

• TrustPassword (string) --

  [REQUIRED]

  The trust password. The must be the same password that was used when creating the trust relationship on the external domain.

• TrustDirection (string) --

  [REQUIRED]

  The direction of the trust relationship.

• TrustType (string) -- The trust relationship type. Forest is the default.
• ConditionalForwarderIpAddrs (list) --

  The IP addresses of the remote DNS server associated with RemoteDomainName.

  • (string) --
• SelectiveAuth (string) -- Optional parameter to enable selective authentication for the trust.

Return type

dict

Returns

Response Syntax

{
    'TrustId': 'string'
}

Response Structure

• (dict) --

  The result of a CreateTrust request.

  • TrustId (string) --

    A unique identifier for the trust relationship that was created.

Exceptions

• DirectoryService.Client.exceptions.EntityAlreadyExistsException
• DirectoryService.Client.exceptions.EntityDoesNotExistException
• DirectoryService.Client.exceptions.InvalidParameterException
• DirectoryService.Client.exceptions.ClientException
• DirectoryService.Client.exceptions.ServiceException
• DirectoryService.Client.exceptions.UnsupportedOperationException