Allow a key within a rule
POST/vedsdk/sshrules/rule/key/allow
Allows the key under the rule identified by HostId and Account. Other rules with the same key are not changed.
The decision takes effect only while the rule is in Enforce mode. An allowed key is still refused if it is later revoked, expires, or breaks an enforced profile policy.
A key that is revoked, has expired, or was replaced under this rule by a key rotation cannot be allowed: nothing lets it in, so the request is refused rather than recorded. A key a rotation is replacing can still be allowed until its grace period ends.
Required scope: sshrules:manage
Request
Responses
- 200
- 400
- 403
- 404
- 409
- 500
The rule allows the key.
HostId, Account or FingerprintSHA256 is missing, or a value is invalid.
The caller does not have Write permission on the SSH authorization profile.
The rule, the key or the CA key does not exist, or the rule does not have this key.
The key is revoked, has expired, or was replaced under this rule by a key rotation.
An unexpected error occurred.