Amazon EC2 Ec2 Verified Access Endpoint API
The Ec2 Verified Access Endpoint API from Amazon EC2 — 4 operation(s) for ec2 verified access endpoint.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/amazon-ec2:amazon-ec2-verified-access-endpoint-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Amazon Elastic Compute Cloud Verified Access Endpoint API
version: '2016-11-15'
description: Generated from AWS's published Smithy model for Amazon Elastic Compute Cloud. 4 operation(s).
contact:
name: Amazon Web Services
url: https://aws.amazon.com/contact-us/
license:
name: Apache 2.0
identifier: Apache-2.0
url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://ec2.{region}.amazonaws.com
variables:
region:
default: us-east-1
security:
- sigv4: []
tags:
- name: Verified Access Endpoint
paths:
/?Action=CreateVerifiedAccessEndpoint:
post:
operationId: CreateVerifiedAccessEndpoint
summary: Create Verified Access Endpoint
description: An Amazon Web Services Verified Access endpoint is where you define your application along with an optional endpoint-level access policy.
responses:
'200':
description: Success
content:
text/xml:
schema:
$ref: '#/components/schemas/CreateVerifiedAccessEndpointResult'
requestBody:
required: true
content:
application/x-www-form-urlencoded:
schema:
allOf:
- type: object
required:
- Action
- Version
properties:
Action:
type: string
const: CreateVerifiedAccessEndpoint
Version:
type: string
const: '2016-11-15'
- $ref: '#/components/schemas/CreateVerifiedAccessEndpointRequest'
tags:
- Verified Access Endpoint
/?Action=DeleteVerifiedAccessEndpoint:
post:
operationId: DeleteVerifiedAccessEndpoint
summary: Delete Verified Access Endpoint
description: Delete an Amazon Web Services Verified Access endpoint.
responses:
'200':
description: Success
content:
text/xml:
schema:
$ref: '#/components/schemas/DeleteVerifiedAccessEndpointResult'
requestBody:
required: true
content:
application/x-www-form-urlencoded:
schema:
allOf:
- type: object
required:
- Action
- Version
properties:
Action:
type: string
const: DeleteVerifiedAccessEndpoint
Version:
type: string
const: '2016-11-15'
- $ref: '#/components/schemas/DeleteVerifiedAccessEndpointRequest'
tags:
- Verified Access Endpoint
/?Action=DescribeVerifiedAccessEndpoints:
post:
operationId: DescribeVerifiedAccessEndpoints
summary: Describe Verified Access Endpoints
description: Describes the specified Amazon Web Services Verified Access endpoints.
responses:
'200':
description: Success
content:
text/xml:
schema:
$ref: '#/components/schemas/DescribeVerifiedAccessEndpointsResult'
requestBody:
required: true
content:
application/x-www-form-urlencoded:
schema:
allOf:
- type: object
required:
- Action
- Version
properties:
Action:
type: string
const: DescribeVerifiedAccessEndpoints
Version:
type: string
const: '2016-11-15'
- $ref: '#/components/schemas/DescribeVerifiedAccessEndpointsRequest'
tags:
- Verified Access Endpoint
/?Action=ModifyVerifiedAccessEndpoint:
post:
operationId: ModifyVerifiedAccessEndpoint
summary: Modify Verified Access Endpoint
description: Modifies the configuration of the specified Amazon Web Services Verified Access endpoint.
responses:
'200':
description: Success
content:
text/xml:
schema:
$ref: '#/components/schemas/ModifyVerifiedAccessEndpointResult'
requestBody:
required: true
content:
application/x-www-form-urlencoded:
schema:
allOf:
- type: object
required:
- Action
- Version
properties:
Action:
type: string
const: ModifyVerifiedAccessEndpoint
Version:
type: string
const: '2016-11-15'
- $ref: '#/components/schemas/ModifyVerifiedAccessEndpointRequest'
tags:
- Verified Access Endpoint
components:
schemas:
DescribeVerifiedAccessEndpointsResult:
type: object
properties:
VerifiedAccessEndpoints:
type: array
items:
$ref: '#/components/schemas/VerifiedAccessEndpoint'
description: Details about the Verified Access endpoints.
NextToken:
type: string
description: The token to use to retrieve the next page of results. This value is null when there are no more results to return.
DeleteVerifiedAccessEndpointResult:
type: object
properties:
VerifiedAccessEndpoint:
$ref: '#/components/schemas/VerifiedAccessEndpoint'
VerifiedAccessEndpointPortRange:
type: object
properties:
FromPort:
type: integer
description: The start of the port range.
ToPort:
type: integer
description: The end of the port range.
CreateVerifiedAccessEndpointRdsOptions:
type: object
properties:
Protocol:
type: string
enum:
- http
- https
- tcp
description: The protocol.
Port:
type: integer
description: The port.
RdsDbInstanceArn:
type: string
description: The ARN of the RDS instance.
RdsDbClusterArn:
type: string
description: The ARN of the DB cluster.
RdsDbProxyArn:
type: string
description: The ARN of the RDS proxy.
RdsEndpoint:
type: string
description: The RDS endpoint.
SubnetIds:
type: array
items:
type: string
description: The IDs of the subnets. You can specify only one subnet per Availability Zone.
ModifyVerifiedAccessEndpointRdsOptions:
type: object
properties:
SubnetIds:
type: array
items:
type: string
description: The IDs of the subnets.
Port:
type: integer
description: The port.
RdsEndpoint:
type: string
description: The RDS endpoint.
Filter:
type: object
properties:
Name:
type: string
description: The name of the filter. Filter names are case-sensitive.
Values:
type: array
items:
type: string
description: The filter values. Filter values are case-sensitive. If you specify multiple values for a filter, the values are joined with an OR, and the request returns all results that match any of the specified values.
VerifiedAccessEndpointCidrOptions:
type: object
properties:
Cidr:
type: string
description: The CIDR.
PortRanges:
type: array
items:
$ref: '#/components/schemas/VerifiedAccessEndpointPortRange'
description: The port ranges.
Protocol:
type: string
enum:
- http
- https
- tcp
description: The protocol.
SubnetIds:
type: array
items:
type: string
description: The IDs of the subnets.
DescribeVerifiedAccessEndpointsRequest:
type: object
properties:
VerifiedAccessEndpointIds:
type: array
items:
type: string
description: The ID of the Verified Access endpoint.
VerifiedAccessInstanceId:
type: string
description: The ID of the Verified Access instance.
VerifiedAccessGroupId:
type: string
description: The ID of the Verified Access group.
MaxResults:
type: integer
description: The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value.
NextToken:
type: string
description: The token for the next page of results.
Filters:
type: array
items:
$ref: '#/components/schemas/Filter'
description: One or more filters. Filter names and values are case-sensitive.
DryRun:
type: boolean
description: Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
ModifyVerifiedAccessEndpointPortRange:
type: object
properties:
FromPort:
type: integer
description: The start of the port range.
ToPort:
type: integer
description: The end of the port range.
DeleteVerifiedAccessEndpointRequest:
type: object
properties:
VerifiedAccessEndpointId:
type: string
description: The ID of the Verified Access endpoint.
ClientToken:
type: string
description: A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring idempotency.
DryRun:
type: boolean
description: Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
required:
- VerifiedAccessEndpointId
CreateVerifiedAccessEndpointEniOptions:
type: object
properties:
NetworkInterfaceId:
type: string
description: The ID of the network interface.
Protocol:
type: string
enum:
- http
- https
- tcp
description: The IP protocol.
Port:
type: integer
description: The IP port number.
PortRanges:
type: array
items:
$ref: '#/components/schemas/CreateVerifiedAccessEndpointPortRange'
description: The port ranges.
CreateVerifiedAccessEndpointPortRange:
type: object
properties:
FromPort:
type: integer
description: The start of the port range.
ToPort:
type: integer
description: The end of the port range.
CreateVerifiedAccessEndpointCidrOptions:
type: object
properties:
Protocol:
type: string
enum:
- http
- https
- tcp
description: The protocol.
SubnetIds:
type: array
items:
type: string
description: The IDs of the subnets.
Cidr:
type: string
description: The CIDR.
PortRanges:
type: array
items:
$ref: '#/components/schemas/CreateVerifiedAccessEndpointPortRange'
description: The port ranges.
VerifiedAccessSseSpecificationResponse:
type: object
properties:
CustomerManagedKeyEnabled:
type: boolean
description: 'Indicates whether customer managed KMS keys are in use for server side encryption. Valid values: True | False'
KmsKeyArn:
type: string
description: The ARN of the KMS key.
VerifiedAccessSseSpecificationRequest:
type: object
properties:
CustomerManagedKeyEnabled:
type: boolean
description: 'Enable or disable the use of customer managed KMS keys for server side encryption. Valid values: True | False'
KmsKeyArn:
type: string
description: The ARN of the KMS key.
ModifyVerifiedAccessEndpointRequest:
type: object
properties:
VerifiedAccessEndpointId:
type: string
description: The ID of the Verified Access endpoint.
VerifiedAccessGroupId:
type: string
description: The ID of the Verified Access group.
LoadBalancerOptions:
$ref: '#/components/schemas/ModifyVerifiedAccessEndpointLoadBalancerOptions'
NetworkInterfaceOptions:
$ref: '#/components/schemas/ModifyVerifiedAccessEndpointEniOptions'
Description:
type: string
description: A description for the Verified Access endpoint.
ClientToken:
type: string
description: A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring idempotency.
DryRun:
type: boolean
description: Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
RdsOptions:
$ref: '#/components/schemas/ModifyVerifiedAccessEndpointRdsOptions'
CidrOptions:
$ref: '#/components/schemas/ModifyVerifiedAccessEndpointCidrOptions'
required:
- VerifiedAccessEndpointId
VerifiedAccessEndpoint:
type: object
properties:
VerifiedAccessInstanceId:
type: string
description: The ID of the Amazon Web Services Verified Access instance.
VerifiedAccessGroupId:
type: string
description: The ID of the Amazon Web Services Verified Access group.
VerifiedAccessEndpointId:
type: string
description: The ID of the Amazon Web Services Verified Access endpoint.
ApplicationDomain:
type: string
description: The DNS name for users to reach your application.
EndpointType:
type: string
enum:
- load-balancer
- network-interface
- rds
- cidr
description: The type of Amazon Web Services Verified Access endpoint. Incoming application requests will be sent to an IP address, load balancer or a network interface depending on the endpoint type specified.
AttachmentType:
type: string
enum:
- vpc
description: The type of attachment used to provide connectivity between the Amazon Web Services Verified Access endpoint and the application.
DomainCertificateArn:
type: string
description: The ARN of a public TLS/SSL certificate imported into or created with ACM.
EndpointDomain:
type: string
description: A DNS name that is generated for the endpoint.
DeviceValidationDomain:
type: string
description: Returned if endpoint has a device trust provider attached.
SecurityGroupIds:
type: array
items:
type: string
description: The IDs of the security groups for the endpoint.
LoadBalancerOptions:
$ref: '#/components/schemas/VerifiedAccessEndpointLoadBalancerOptions'
NetworkInterfaceOptions:
$ref: '#/components/schemas/VerifiedAccessEndpointEniOptions'
Status:
$ref: '#/components/schemas/VerifiedAccessEndpointStatus'
Description:
type: string
description: A description for the Amazon Web Services Verified Access endpoint.
CreationTime:
type: string
description: The creation time.
LastUpdatedTime:
type: string
description: The last updated time.
DeletionTime:
type: string
description: The deletion time.
Tags:
type: array
items:
$ref: '#/components/schemas/Tag'
description: The tags.
SseSpecification:
$ref: '#/components/schemas/VerifiedAccessSseSpecificationResponse'
RdsOptions:
$ref: '#/components/schemas/VerifiedAccessEndpointRdsOptions'
CidrOptions:
$ref: '#/components/schemas/VerifiedAccessEndpointCidrOptions'
ModifyVerifiedAccessEndpointLoadBalancerOptions:
type: object
properties:
SubnetIds:
type: array
items:
type: string
description: The IDs of the subnets.
Protocol:
type: string
enum:
- http
- https
- tcp
description: The IP protocol.
Port:
type: integer
description: The IP port number.
PortRanges:
type: array
items:
$ref: '#/components/schemas/ModifyVerifiedAccessEndpointPortRange'
description: The port ranges.
VerifiedAccessEndpointEniOptions:
type: object
properties:
NetworkInterfaceId:
type: string
description: The ID of the network interface.
Protocol:
type: string
enum:
- http
- https
- tcp
description: The IP protocol.
Port:
type: integer
description: The IP port number.
PortRanges:
type: array
items:
$ref: '#/components/schemas/VerifiedAccessEndpointPortRange'
description: The port ranges.
CreateVerifiedAccessEndpointLoadBalancerOptions:
type: object
properties:
Protocol:
type: string
enum:
- http
- https
- tcp
description: The IP protocol.
Port:
type: integer
description: The IP port number.
LoadBalancerArn:
type: string
description: The ARN of the load balancer.
SubnetIds:
type: array
items:
type: string
description: The IDs of the subnets. You can specify only one subnet per Availability Zone.
PortRanges:
type: array
items:
$ref: '#/components/schemas/CreateVerifiedAccessEndpointPortRange'
description: The port ranges.
ModifyVerifiedAccessEndpointResult:
type: object
properties:
VerifiedAccessEndpoint:
$ref: '#/components/schemas/VerifiedAccessEndpoint'
ModifyVerifiedAccessEndpointCidrOptions:
type: object
properties:
PortRanges:
type: array
items:
$ref: '#/components/schemas/ModifyVerifiedAccessEndpointPortRange'
description: The port ranges.
TagSpecification:
type: object
properties:
ResourceType:
type: string
enum:
- capacity-reservation
- client-vpn-endpoint
- customer-gateway
- carrier-gateway
- coip-pool
- declarative-policies-report
- dedicated-host
- dhcp-options
- egress-only-internet-gateway
- elastic-ip
- elastic-gpu
- export-image-task
- export-instance-task
- fleet
- fpga-image
- host-reservation
- image
- image-usage-report
- import-image-task
- import-snapshot-task
- instance
- instance-event-window
- internet-gateway
- ipam
- ipam-pool
- ipam-scope
- ipv4pool-ec2
- ipv6pool-ec2
- key-pair
- launch-template
- local-gateway
- local-gateway-route-table
- local-gateway-virtual-interface
- local-gateway-virtual-interface-group
- local-gateway-route-table-vpc-association
- local-gateway-route-table-virtual-interface-group-association
- natgateway
- network-acl
- network-interface
- network-insights-analysis
- network-insights-path
- network-insights-access-scope
- network-insights-access-scope-analysis
- outpost-lag
- placement-group
- prefix-list
- replace-root-volume-task
- reserved-instances
- route-table
- security-group
- security-group-rule
- service-link-virtual-interface
- snapshot
- spot-fleet-request
- spot-instances-request
- subnet
- subnet-cidr-reservation
- traffic-mirror-filter
- traffic-mirror-session
- traffic-mirror-target
- transit-gateway
- transit-gateway-attachment
- transit-gateway-connect-peer
- transit-gateway-multicast-domain
- transit-gateway-policy-table
- transit-gateway-metering-policy
- transit-gateway-route-table
- transit-gateway-route-table-announcement
- volume
- vpc
- vpc-endpoint
- vpc-endpoint-connection
- vpc-endpoint-service
- vpc-endpoint-service-permission
- vpc-peering-connection
- vpn-connection
- vpn-gateway
- vpc-flow-log
- capacity-reservation-fleet
- traffic-mirror-filter-rule
- vpc-endpoint-connection-device-type
- verified-access-instance
- verified-access-group
- verified-access-endpoint
- verified-access-policy
- verified-access-trust-provider
- vpn-connection-device-type
- vpc-block-public-access-exclusion
- vpc-encryption-control
- route-server
- route-server-endpoint
- route-server-peer
- ipam-resource-discovery
- ipam-resource-discovery-association
- instance-connect-endpoint
- verified-access-endpoint-target
- ipam-external-resource-verification-token
- capacity-block
- mac-modification-task
- ipam-prefix-list-resolver
- ipam-policy
- ipam-prefix-list-resolver-target
- ipam-internet-registry-association
- secondary-interface
- secondary-network
- secondary-subnet
- capacity-manager-data-export
- vpn-concentrator
- ipam-pool-allocation
- capacity-reservation-cancellation-quote
- application-status-check
- capacity-reservation-modification-quote
description: The type of resource to tag on creation.
Tags:
type: array
items:
$ref: '#/components/schemas/Tag'
description: The tags to apply to the resource.
VerifiedAccessEndpointRdsOptions:
type: object
properties:
Protocol:
type: string
enum:
- http
- https
- tcp
description: The protocol.
Port:
type: integer
description: The port.
RdsDbInstanceArn:
type: string
description: The ARN of the RDS instance.
RdsDbClusterArn:
type: string
description: The ARN of the DB cluster.
RdsDbProxyArn:
type: string
description: The ARN of the RDS proxy.
RdsEndpoint:
type: string
description: The RDS endpoint.
SubnetIds:
type: array
items:
type: string
description: The IDs of the subnets.
VerifiedAccessEndpointLoadBalancerOptions:
type: object
properties:
Protocol:
type: string
enum:
- http
- https
- tcp
description: The IP protocol.
Port:
type: integer
description: The IP port number.
LoadBalancerArn:
type: string
description: The ARN of the load balancer.
SubnetIds:
type: array
items:
type: string
description: The IDs of the subnets.
PortRanges:
type: array
items:
$ref: '#/components/schemas/VerifiedAccessEndpointPortRange'
description: The port ranges.
Tag:
type: object
properties:
Key:
type: string
description: 'The key of the tag. Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws:.'
Value:
type: string
description: 'The value of the tag. Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters.'
CreateVerifiedAccessEndpointResult:
type: object
properties:
VerifiedAccessEndpoint:
$ref: '#/components/schemas/VerifiedAccessEndpoint'
CreateVerifiedAccessEndpointRequest:
type: object
properties:
VerifiedAccessGroupId:
type: string
description: The ID of the Verified Access group to associate the endpoint with.
EndpointType:
type: string
enum:
- load-balancer
- network-interface
- rds
- cidr
description: The type of Verified Access endpoint to create.
AttachmentType:
type: string
enum:
- vpc
description: The type of attachment.
DomainCertificateArn:
type: string
description: The ARN of the public TLS/SSL certificate in Amazon Web Services Certificate Manager to associate with the endpoint. The CN in the certificate must match the DNS name your end users will use to reach your application.
ApplicationDomain:
type: string
description: The DNS name for users to reach your application.
EndpointDomainPrefix:
type: string
description: A custom identifier that is prepended to the DNS name that is generated for the endpoint.
SecurityGroupIds:
type: array
items:
type: string
description: The IDs of the security groups to associate with the Verified Access endpoint. Required if AttachmentType is set to vpc.
LoadBalancerOptions:
$ref: '#/components/schemas/CreateVerifiedAccessEndpointLoadBalancerOptions'
NetworkInterfaceOptions:
$ref: '#/components/schemas/CreateVerifiedAccessEndpointEniOptions'
Description:
type: string
description: A description for the Verified Access endpoint.
PolicyDocument:
type: string
description: The Verified Access policy document.
TagSpecifications:
type: array
items:
$ref: '#/components/schemas/TagSpecification'
description: The tags to assign to the Verified Access endpoint.
ClientToken:
type: string
description: A unique, case-sensitive token that you provide to ensure idempotency of your modification request. For more information, see Ensuring idempotency.
DryRun:
type: boolean
description: Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
SseSpecification:
$ref: '#/components/schemas/VerifiedAccessSseSpecificationRequest'
RdsOptions:
$ref: '#/components/schemas/CreateVerifiedAccessEndpointRdsOptions'
CidrOptions:
$ref: '#/components/schemas/CreateVerifiedAccessEndpointCidrOptions'
required:
- VerifiedAccessGroupId
- EndpointType
- AttachmentType
ModifyVerifiedAccessEndpointEniOptions:
type: object
properties:
Protocol:
type: string
enum:
- http
- https
- tcp
description: The IP protocol.
Port:
type: integer
description: The IP port number.
PortRanges:
type: array
items:
$ref: '#/components/schemas/ModifyVerifiedAccessEndpointPortRange'
description: The port ranges.
VerifiedAccessEndpointStatus:
type: object
properties:
Code:
type: string
enum:
- pending
- active
- updating
- deleting
- deleted
description: The status code of the Verified Access endpoint.
Message:
type: string
description: The status message of the Verified Access endpoint.
securitySchemes:
sigv4:
type: apiKey
in: header
name: Authorization
description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
x-aws-sigv4:
signingName: ec2
x-provenance:
method: harvested
publisher: Amazon Web Services
source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/ec2/service/2016-11-15/ec2-2016-11-15.json
note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)