Amazon Well-Architected Tool · Agentic Access
Amazon Well-Architected Tool Agentic Access
x-agentic-access
generated
Amazon Well-Architected Tool exposes 56 API operations that an AI agent could call, of which 34 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 22 read and 34 write.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
ArchitectureBest PracticesCloud GovernanceWell-ArchitectedWorkloads
Operations: 56
Acting: 34
Human-in-the-loop: 0
Method: generated
By consequence
read 22
write 34
Source
Agentic Access
generated: '2026-07-15'
method: generated
source: openapi/amazon-well-architected-tool-openapi-original.yaml
description: Recommended x-agentic-access execution contracts, classified heuristically from
the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
audience per deployment. See research/curity/agentic-governance/.
summary:
operations: 56
by_action_class:
acting: 34
connected: 22
by_consequence:
write: 34
read: 22
human_in_the_loop_required: 0
operations:
- path: /workloads/{WorkloadId}/associateLenses
method: patch
operationId: AssociateLenses
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/associateProfiles
method: patch
operationId: AssociateProfiles
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /lenses/{LensAlias}/shares
method: post
operationId: CreateLensShare
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /lenses/{LensAlias}/shares
method: get
operationId: ListLensShares
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /lenses/{LensAlias}/versions
method: post
operationId: CreateLensVersion
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/milestones
method: post
operationId: CreateMilestone
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /profiles
method: post
operationId: CreateProfile
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /profiles/{ProfileArn}/shares
method: post
operationId: CreateProfileShare
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /profiles/{ProfileArn}/shares
method: get
operationId: ListProfileShares
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /workloads
method: post
operationId: CreateWorkload
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/shares
method: post
operationId: CreateWorkloadShare
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/shares
method: get
operationId: ListWorkloadShares
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /lenses/{LensAlias}#ClientRequestToken&LensStatus
method: delete
operationId: DeleteLens
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /lenses/{LensAlias}/shares/{ShareId}#ClientRequestToken
method: delete
operationId: DeleteLensShare
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /profiles/{ProfileArn}#ClientRequestToken
method: delete
operationId: DeleteProfile
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /profiles/{ProfileArn}/shares/{ShareId}#ClientRequestToken
method: delete
operationId: DeleteProfileShare
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}#ClientRequestToken
method: delete
operationId: DeleteWorkload
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/shares/{ShareId}#ClientRequestToken
method: delete
operationId: DeleteWorkloadShare
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/disassociateLenses
method: patch
operationId: DisassociateLenses
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/disassociateProfiles
method: patch
operationId: DisassociateProfiles
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /lenses/{LensAlias}/export
method: get
operationId: ExportLens
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /workloads/{WorkloadId}/lensReviews/{LensAlias}/answers/{QuestionId}
method: get
operationId: GetAnswer
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /workloads/{WorkloadId}/lensReviews/{LensAlias}/answers/{QuestionId}
method: patch
operationId: UpdateAnswer
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /consolidatedReport#Format
method: get
operationId: GetConsolidatedReport
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /lenses/{LensAlias}
method: get
operationId: GetLens
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /workloads/{WorkloadId}/lensReviews/{LensAlias}
method: get
operationId: GetLensReview
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /workloads/{WorkloadId}/lensReviews/{LensAlias}
method: patch
operationId: UpdateLensReview
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/lensReviews/{LensAlias}/report
method: get
operationId: GetLensReviewReport
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /lenses/{LensAlias}/versionDifference
method: get
operationId: GetLensVersionDifference
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /workloads/{WorkloadId}/milestones/{MilestoneNumber}
method: get
operationId: GetMilestone
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /profiles/{ProfileArn}
method: get
operationId: GetProfile
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /profiles/{ProfileArn}
method: patch
operationId: UpdateProfile
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /profileTemplate
method: get
operationId: GetProfileTemplate
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /workloads/{WorkloadId}
method: get
operationId: GetWorkload
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /workloads/{WorkloadId}
method: patch
operationId: UpdateWorkload
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /importLens
method: put
operationId: ImportLens
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/lensReviews/{LensAlias}/answers
method: get
operationId: ListAnswers
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /workloads/{WorkloadId}/checks
method: post
operationId: ListCheckDetails
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/checkSummaries
method: post
operationId: ListCheckSummaries
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/lensReviews/{LensAlias}/improvements
method: get
operationId: ListLensReviewImprovements
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /workloads/{WorkloadId}/lensReviews
method: get
operationId: ListLensReviews
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /lenses
method: get
operationId: ListLenses
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /workloads/{WorkloadId}/milestonesSummaries
method: post
operationId: ListMilestones
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /notifications
method: post
operationId: ListNotifications
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /profileNotifications/
method: get
operationId: ListProfileNotifications
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /profileSummaries
method: get
operationId: ListProfiles
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /shareInvitations
method: get
operationId: ListShareInvitations
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /tags/{WorkloadArn}
method: get
operationId: ListTagsForResource
x-agentic-access:
action-class: connected
consequence: read
subject: optional
token:
max-ttl: 3600
audit: none
- path: /tags/{WorkloadArn}
method: post
operationId: TagResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloadsSummaries
method: post
operationId: ListWorkloads
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /tags/{WorkloadArn}#tagKeys
method: delete
operationId: UntagResource
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /global-settings
method: patch
operationId: UpdateGlobalSettings
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /shareInvitations/{ShareInvitationId}
method: patch
operationId: UpdateShareInvitation
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/shares/{ShareId}
method: patch
operationId: UpdateWorkloadShare
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/lensReviews/{LensAlias}/upgrade
method: put
operationId: UpgradeLensReview
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required
- path: /workloads/{WorkloadId}/profiles/{ProfileArn}/upgrade
method: put
operationId: UpgradeProfileVersion
x-agentic-access:
action-class: acting
consequence: write
subject: required
audience: null
token:
max-ttl: 900
escalation:
human-in-the-loop: conditional
triggers:
- abnormal
- high-value
audit: required