API Reference

/auth-method-create-aws-iam

post
https://api.akeyless.io/auth-method-create-aws-iam
Body Params
int64
Defaults to 0

Access expiration date in Unix timestamp (select 0 for access without expiry date)

allowed-client-type
array of strings

limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]

allowed-client-type
audit-logs-claims
array of strings

Subclaims to include in audit logs, e.g "--audit-logs-claims email --audit-logs-claims username"

audit-logs-claims
bound-arn
array of strings

A list of full arns that the access is restricted to

bound-arn
bound-aws-account-id
array of strings
required

A list of AWS account-IDs that the access is restricted to

bound-aws-account-id*
bound-ips
array of strings

A CIDR whitelist with the IPs that the access is restricted to

bound-ips
bound-resource-id
array of strings

A list of full resource ids that the access is restricted to

bound-resource-id
bound-role-id
array of strings

A list of full role ids that the access is restricted to

bound-role-id
bound-role-name
array of strings

A list of full role-name that the access is restricted to

bound-role-name
bound-user-id
array of strings

A list of full user ids that the access is restricted to

bound-user-id
bound-user-name
array of strings

A list of full user-name that the access is restricted to

bound-user-name
string

Protection from accidental deletion of this object [true/false]

string

Auth Method description

expiration-event-in
array of strings

How many days before the expiration of the auth method would you like to be notified.

expiration-event-in
boolean

if true: enforce role-association must include sub claims

gw-bound-ips
array of strings

A CIDR whitelist with the GW IPs that the access is restricted to

gw-bound-ips
boolean
Defaults to false

Set output format to JSON

int64
Defaults to 0

Jwt TTL

string
required

Auth Method name

product-type
array of strings

Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]

product-type
string
Defaults to https://sts.amazonaws.com

sts URL

string

Authentication token (see /auth and /configure)

string

The universal identity token, Required only for universal_identity authentication

string

A unique identifier (ID) value which is a "sub claim" name that contains details uniquely identifying that resource. This "sub claim" is used to distinguish between different identities.

Responses

Updated 7 months ago

Language
Response 
Click Try It! to start a request and see the response here! Or choose an example:
application/json
Updated 7 months ago 



    
    
    Footer Section