aac tenant register |
Register a tenant or resume this profile's pending registration. |
aac tenant list |
List registered tenants visible to your credential (your own tenant, with a session; registration-attribute tier). |
aac tenant describe |
One tenant's full registration state (API-key METADATA only). |
aac tenant issue-domain-challenge |
Issue or rotate the DNS TXT challenge for one tenant business domain. |
aac tenant verify-domain |
Resolve and verify the current DNS TXT tenant-domain challenge. |
aac tenant release-domain |
Voluntarily release one business-domain claim for planned transfer. |
aac tenant revoke-domain |
Terminally revoke one business-domain claim for security or teardown. |
aac tenant update |
Update mutable tenant attributes (sparse: only passed flags change). |
aac tenant api-key |
Plan a zero-downtime tenant API-key rotation. |
aac tenant reissue-api-key |
Replace a lost or suspected-compromised tenant API key. |
aac tenant add-workload |
Add a post-registration workload identity. |
aac tenant list-workloads |
List this tenant's workload lifecycle records. |
aac tenant describe-workload |
Describe one workload lifecycle record by opaque id. |
aac tenant update-workload |
Set or clear a workload's display name. |
aac tenant deactivate-workload |
Terminally deactivate a workload. |
aac tenant assign-hosted-domain |
Request the AAC-assigned trust domain for your tenant and save it in the bound profile; repeated calls reuse it. |
aac tenant reactivate-hosted-domain |
Reactivate the tenant's AAC-assigned trust domain after a revocation; the name does not change. |
aac tenant bind-trust-domain |
Bind a SPIFFE trust domain using current exact-name evidence or ceremony. |
aac tenant list-trust-domains |
List this tenant's trust-domain bindings. |
aac tenant rotate-admin-key |
Replace this tenant's admin key with a new PUBLIC key. |
aac tenant revoke-trust-domain |
Revoke a trust-domain binding episode by binding id. |