Amazon API Gateway Agentic Access
Amazon API Gateway exposes 134 API operations that an AI agent could call, of which 78 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 56 read, 72 write, and 6 physical.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /restapis/{restapi_id}/deployments | physical | conditional |
| POST | /restapis/{restapi_id}/deployments | physical | conditional |
| PATCH | /restapis/{restapi_id}/deployments/{deployment_id} | physical | conditional |
| DELETE | /restapis/{restapi_id}/deployments/{deployment_id} | physical | conditional |
| PATCH | /restapis/{restapi_id}/deployments/{deployment_id} | physical | conditional |
| DELETE | /restapis/{restapi_id}/deployments/{deployment_id} | physical | conditional |
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/amazon-api-gateway-openapi.yaml, openapi/amazon-api-gateway-rest-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 134
by_action_class:
connected: 56
acting: 78
by_consequence:
read: 56
write: 72
physical: 6
human_in_the_loop_required: 0
operations:
- path: /restapis
method: get
operationId: GetRestApis
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis
method: post
operationId: CreateRestApi
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}
method: get
operationId: GetRestApi
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}
method: patch
operationId: UpdateRestApi
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}
method: delete
operationId: DeleteRestApi
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources
method: get
operationId: GetResources
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/resources/{resource_id}
method: get
operationId: GetResource
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/resources/{resource_id}
method: post
operationId: CreateResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources/{resource_id}
method: patch
operationId: UpdateResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources/{resource_id}
method: delete
operationId: DeleteResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources/{resource_id}/methods/{http_method}
method: get
operationId: GetMethod
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/resources/{resource_id}/methods/{http_method}
method: put
operationId: PutMethod
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources/{resource_id}/methods/{http_method}
method: patch
operationId: UpdateMethod
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources/{resource_id}/methods/{http_method}
method: delete
operationId: DeleteMethod
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources/{resource_id}/methods/{http_method}/integration
method: get
operationId: GetIntegration
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/resources/{resource_id}/methods/{http_method}/integration
method: put
operationId: PutIntegration
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/stages
method: get
operationId: GetStages
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/stages
method: post
operationId: CreateStage
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/stages/{stage_name}
method: get
operationId: GetStage
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/stages/{stage_name}
method: patch
operationId: UpdateStage
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/stages/{stage_name}
method: delete
operationId: DeleteStage
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/deployments
method: get
operationId: GetDeployments
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/deployments
method: post
operationId: CreateDeployment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/deployments/{deployment_id}
method: get
operationId: GetDeployment
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/deployments/{deployment_id}
method: patch
operationId: UpdateDeployment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/deployments/{deployment_id}
method: delete
operationId: DeleteDeployment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/authorizers
method: get
operationId: GetAuthorizers
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/authorizers
method: post
operationId: CreateAuthorizer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/authorizers/{authorizer_id}
method: get
operationId: GetAuthorizer
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/authorizers/{authorizer_id}
method: patch
operationId: UpdateAuthorizer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/authorizers/{authorizer_id}
method: delete
operationId: DeleteAuthorizer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/models
method: get
operationId: GetModels
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/models
method: post
operationId: CreateModel
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/models/{model_name}
method: get
operationId: GetModel
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/models/{model_name}
method: patch
operationId: UpdateModel
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/models/{model_name}
method: delete
operationId: DeleteModel
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /apikeys
method: get
operationId: GetApiKeys
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /apikeys
method: post
operationId: CreateApiKey
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /apikeys/{api_key}
method: get
operationId: GetApiKey
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /apikeys/{api_key}
method: patch
operationId: UpdateApiKey
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /apikeys/{api_key}
method: delete
operationId: DeleteApiKey
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /usageplans
method: get
operationId: GetUsagePlans
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /usageplans
method: post
operationId: CreateUsagePlan
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /usageplans/{usageplan_id}
method: get
operationId: GetUsagePlan
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /usageplans/{usageplan_id}
method: patch
operationId: UpdateUsagePlan
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /usageplans/{usageplan_id}
method: delete
operationId: DeleteUsagePlan
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /domainnames
method: get
operationId: GetDomainNames
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /domainnames
method: post
operationId: CreateDomainName
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /domainnames/{domain_name}
method: get
operationId: GetDomainName
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /domainnames/{domain_name}
method: patch
operationId: UpdateDomainName
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /domainnames/{domain_name}
method: delete
operationId: DeleteDomainName
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /domainnames/{domain_name}/basepathmappings
method: get
operationId: GetBasePathMappings
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /domainnames/{domain_name}/basepathmappings
method: post
operationId: CreateBasePathMapping
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/requestvalidators
method: get
operationId: GetRequestValidators
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/requestvalidators
method: post
operationId: CreateRequestValidator
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/gatewayresponses
method: get
operationId: GetGatewayResponses
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/gatewayresponses/{response_type}
method: get
operationId: GetGatewayResponse
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/gatewayresponses/{response_type}
method: put
operationId: PutGatewayResponse
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpclinks
method: get
operationId: GetVpcLinks
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /vpclinks
method: post
operationId: CreateVpcLink
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpclinks/{vpclink_id}
method: get
operationId: GetVpcLink
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /vpclinks/{vpclink_id}
method: patch
operationId: UpdateVpcLink
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /vpclinks/{vpclink_id}
method: delete
operationId: DeleteVpcLink
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/documentation/parts
method: get
operationId: GetDocumentationParts
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/documentation/parts
method: post
operationId: CreateDocumentationPart
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/documentation/versions
method: get
operationId: GetDocumentationVersions
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/documentation/versions
method: post
operationId: CreateDocumentationVersion
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis
method: get
operationId: GetRestApis
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis
method: post
operationId: CreateRestApi
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}
method: get
operationId: GetRestApi
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}
method: patch
operationId: UpdateRestApi
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}
method: delete
operationId: DeleteRestApi
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources
method: get
operationId: GetResources
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/resources/{resource_id}
method: get
operationId: GetResource
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/resources/{resource_id}
method: post
operationId: CreateResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources/{resource_id}
method: patch
operationId: UpdateResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources/{resource_id}
method: delete
operationId: DeleteResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources/{resource_id}/methods/{http_method}
method: get
operationId: GetMethod
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/resources/{resource_id}/methods/{http_method}
method: put
operationId: PutMethod
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources/{resource_id}/methods/{http_method}
method: patch
operationId: UpdateMethod
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources/{resource_id}/methods/{http_method}
method: delete
operationId: DeleteMethod
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/resources/{resource_id}/methods/{http_method}/integration
method: get
operationId: GetIntegration
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/resources/{resource_id}/methods/{http_method}/integration
method: put
operationId: PutIntegration
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/stages
method: get
operationId: GetStages
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/stages
method: post
operationId: CreateStage
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/stages/{stage_name}
method: get
operationId: GetStage
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/stages/{stage_name}
method: patch
operationId: UpdateStage
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/stages/{stage_name}
method: delete
operationId: DeleteStage
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/deployments
method: get
operationId: GetDeployments
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/deployments
method: post
operationId: CreateDeployment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/deployments/{deployment_id}
method: get
operationId: GetDeployment
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/deployments/{deployment_id}
method: patch
operationId: UpdateDeployment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/deployments/{deployment_id}
method: delete
operationId: DeleteDeployment
x-agentic-access:
action-class: acting
consequence: physical
subject: required
audience: null
token:
max-ttl: 300
exchange: true
purpose-required: true
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/authorizers
method: get
operationId: GetAuthorizers
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/authorizers
method: post
operationId: CreateAuthorizer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/authorizers/{authorizer_id}
method: get
operationId: GetAuthorizer
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/authorizers/{authorizer_id}
method: patch
operationId: UpdateAuthorizer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/authorizers/{authorizer_id}
method: delete
operationId: DeleteAuthorizer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/models
method: get
operationId: GetModels
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/models
method: post
operationId: CreateModel
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/models/{model_name}
method: get
operationId: GetModel
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /restapis/{restapi_id}/models/{model_name}
method: patch
operationId: UpdateModel
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /restapis/{restapi_id}/models/{model_name}
method: delete
operationId: DeleteModel
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /apikeys
method: get
operationId: GetApiKeys
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /apikeys
method: post
operationId: CreateApiKey
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
a
# --- truncated at 32 KB (40 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/amazon-api-gateway/refs/heads/main/agentic-access/amazon-api-gateway-agentic-access.yml