Retrieves a list of AWS policies for the specified account

POST 
https://api.spectrocloud.com/v1/clouds/aws/policies

Retrieves a list of AWS policies for the specified account

Request

Query Parameters

cloudAccountUid string

Uid for the specific AWS cloud account

Header Parameters

ProjectUid string

Scope the request to the specified project uid

application/json

Body

required

Request payload for AWS Cloud Account

accessKeystring

AWS account access key

credentialTypestring

Possible values: [secret, sts]

Default value: secret

Allowed Values [secret, sts]. STS type will be used for role assumption for sts type, accessKey/secretKey contains the source account, Arn is the target account.

partitionstring

Possible values: [aws, aws-us-gov]

Default value: aws

AWS accounts are scoped to a single partition. Allowed values [aws, aws-us-gov], Default values

policyARNsstring[]

List of policy ARNs required in case of credentialType sts.

secretKeystring

AWS account secret key

sts

object

AWS STS credentials in case of credentialType sts, will be empty in case of credential type secret

arnstring

Arn for the aws sts credentials in cloud account

externalIdstring

ExternalId for the aws sts credentials in cloud account

Responses

200

(empty)

application/json

Schema

Schema

policies

object[]

required

Array [

arnstring

policyIdstring

policyNamestring

]

Example (from schema)

{
  "policies": [
    {
      "arn": "string",
      "policyId": "string",
      "policyName": "string"
    }
  ]
}

• curl
• python
• go
• nodejs
• java

• CURL

curl -L 'https://api.spectrocloud.com/v1/clouds/aws/policies' \
-H 'Content-Type: application/json' \
-H 'Accept: application/json' \
-H 'ApiKey: <API_KEY_VALUE>' \
-d '{
  "accessKey": "string",
  "credentialType": "secret",
  "partition": "aws",
  "policyARNs": [
    "string"
  ],
  "secretKey": "string",
  "sts": {
    "arn": "string",
    "externalId": "string"
  }
}'

Request Collapse all

Base URL

https://api.spectrocloud.com

Auth

Security Scheme

ApiKeyAuthorization

ApiKey

Parameters

cloudAccountUid — query

ProjectUid — header

Body required

{
  "accessKey": "string",
  "credentialType": "secret",
  "partition": "aws",
  "policyARNs": [
    "string"
  ],
  "secretKey": "string",
  "sts": {
    "arn": "string",
    "externalId": "string"
  }
}