This API exposes
5 operations
across 2 paths,
and defines 50 schemas.
It is described by OpenAPI 3.0.0, at version 2015-07-09.
Requests are made against 4 base URLs: http://apigateway.{region}.amazonaws.com, https://apigateway.{region}.amazonaws.com, http://apigateway.{region}.amazonaws.com.cn, https://apigateway.{region}.amazonaws.com.cn.
The identity and technical contract details declared by the specification.
APIs.io Engineering Platform Access Application-Scoped Policies API declares
1 security scheme
for authenticating requests.
An API key is passed in the header as Authorization (hmac).
By default, every request must be authenticated.
hmac — Amazon Signature authorization v4
access_approval_groups
array
Administrators who can approve a temporary authentication request.
access_schemas-require
array
Rules evaluated with an AND logical operator. To match the policy, a user must meet all of the Require rules.
access_any_valid_service_token_rule
object
Matches any valid Access Service Token
1 property
1 required
access_app-policies_components-schemas-single_response
access_service_token_rule
object
Matches a specific Access Service Token
1 property
1 required
access_app-policies_components-schemas-response_collection
access_api-response-collection
object
access_policy_components-schemas-name
string
The name of the Access policy.
access_github_organization_rule
object
Matches a Github organization. Requires a Github identity provider.
1 property
1 required
access_app_policy_response
object
1 property
access_authentication_method_rule
object
Enforce different MFA options
1 property
1 required
access_identifier
string
Identifier
access_saml_group_rule
object
Matches a SAML group. Requires a SAML identity provider.
1 property
1 required
access_access_group_rule
object
Matches an Access group.
1 property
1 required
access_country_rule
object
Matches a specific country
1 property
1 required
access_result_info
object
4 properties
access_app_policy_request
access_api-response-common-failure
object
4 properties
4 required
access_ip_list_rule
object
Matches an IP address from a list.
1 property
1 required
access_policy_resp
object
14 properties
access_approval_required
boolean
Requires the user to request access from an administrator at the start of each session.
access_ip_rule
object
Matches an IP address block.
1 property
1 required
access_purpose_justification_required
boolean
Require users to enter a justification when they log in to the application.
access_gsuite_group_rule
object
Matches a group in Google Workspace. Requires a Google Workspace identity provider.
1 property
1 required
access_isolation_required
boolean
Require this application to be served in an isolated browser for users matching this policy. 'Client Web Isolation' must be on for the account in order to use…
access_okta_group_rule
object
Matches an Okta group. Requires an Okta identity provider.
1 property
1 required
access_api-response-common
object
3 properties
3 required
access_domain_rule
object
Match an entire email domain.
1 property
1 required
access_email_rule
object
Matches a specific email.
1 property
1 required
access_external_evaluation_rule
object
Create Allow or Block policies which evaluate the user based on custom criteria.
1 property
1 required
access_components-schemas-session_duration
string
The amount of time that tokens issued for the application will be valid. Must be in the format 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m,…
access_device_posture_rule
object
Enforces a device posture rule has run successfully
1 property
1 required
access_schemas-exclude
array
Rules evaluated with a NOT logical operator. To match the policy, a user cannot meet any of the Exclude rules.
access_decision
string
The action Access will take if a user matches this policy.
access_everyone_rule
object
Matches everyone.
1 property
1 required
access_email_list_rule
object
Matches an email address from a list.
1 property
1 required
access_precedence
integer
The order of execution for this policy. Must be unique for each policy within an app.
access_approval_group
object
A group of email addresses that can approve a temporary authentication request.
3 properties
1 required
access_purpose_justification_prompt
string
A custom message that will appear on the purpose justification screen.
access_azure_group_rule
object
Matches an Azure group. Requires an Azure identity provider.
1 property
1 required
access_certificate_rule
object
Matches any valid client certificate.
1 property
1 required
access_schemas-uuid
string
The UUID of the policy
access_policy_req
object
11 properties
3 required
access_api-response-single
object
access_include
array
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
The full machine-readable OpenAPI contract behind this narrative.
