Amazon IAM Identity Center Iam Identity Center Application Access Scope API
The Iam Identity Center Application Access Scope API from Amazon IAM Identity Center — 4 operation(s) for iam identity center application access scope.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/amazon-iam-identity-center:amazon-iam-identity-center-application-access-scope-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: AWS Single Sign-On Admin Application Access Scope API
version: '2020-07-20'
description: Generated from AWS's published Smithy model for AWS Single Sign-On Admin. 4 operation(s).
contact:
name: Amazon Web Services
url: https://aws.amazon.com/contact-us/
license:
name: Apache 2.0
identifier: Apache-2.0
url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://sso.{region}.amazonaws.com
variables:
region:
default: us-east-1
security:
- sigv4: []
tags:
- name: Application Access Scope
paths:
/#PutApplicationAccessScope:
post:
operationId: PutApplicationAccessScope
summary: Put Application Access Scope
description: Adds or updates the list of authorized targets for an IAM Identity Center access scope for an application.
responses:
'200':
description: Success
content:
application/x-amz-json-1.1:
schema:
type: string
'403':
description: AccessDeniedException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'409':
description: ConflictException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ConflictException'
'500':
description: InternalServerException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/InternalServerException'
'404':
description: ResourceNotFoundException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'429':
description: ThrottlingException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ThrottlingException'
'400':
description: ValidationException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ValidationException'
parameters:
- name: X-Amz-Target
in: header
required: true
schema:
type: string
enum:
- SWBExternalService.PutApplicationAccessScope
requestBody:
required: true
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/PutApplicationAccessScopeRequest'
tags:
- Application Access Scope
/#GetApplicationAccessScope:
post:
operationId: GetApplicationAccessScope
summary: Get Application Access Scope
description: Retrieves the authorized targets for an IAM Identity Center access scope for an application.
responses:
'200':
description: Success
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/GetApplicationAccessScopeResponse'
'403':
description: AccessDeniedException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'500':
description: InternalServerException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/InternalServerException'
'404':
description: ResourceNotFoundException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'429':
description: ThrottlingException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ThrottlingException'
'400':
description: ValidationException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ValidationException'
parameters:
- name: X-Amz-Target
in: header
required: true
schema:
type: string
enum:
- SWBExternalService.GetApplicationAccessScope
requestBody:
required: true
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/GetApplicationAccessScopeRequest'
tags:
- Application Access Scope
/#DeleteApplicationAccessScope:
post:
operationId: DeleteApplicationAccessScope
summary: Delete Application Access Scope
description: Deletes an IAM Identity Center access scope from an application.
responses:
'200':
description: Success
content:
application/x-amz-json-1.1:
schema:
type: string
'403':
description: AccessDeniedException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'409':
description: ConflictException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ConflictException'
'500':
description: InternalServerException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/InternalServerException'
'404':
description: ResourceNotFoundException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'429':
description: ThrottlingException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ThrottlingException'
'400':
description: ValidationException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ValidationException'
parameters:
- name: X-Amz-Target
in: header
required: true
schema:
type: string
enum:
- SWBExternalService.DeleteApplicationAccessScope
requestBody:
required: true
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/DeleteApplicationAccessScopeRequest'
tags:
- Application Access Scope
/#ListApplicationAccessScopes:
post:
operationId: ListApplicationAccessScopes
summary: List Application Access Scopes
description: Lists the access scopes and authorized targets associated with an application.
responses:
'200':
description: Success
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ListApplicationAccessScopesResponse'
'403':
description: AccessDeniedException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'500':
description: InternalServerException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/InternalServerException'
'404':
description: ResourceNotFoundException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'429':
description: ThrottlingException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ThrottlingException'
'400':
description: ValidationException
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ValidationException'
parameters:
- name: X-Amz-Target
in: header
required: true
schema:
type: string
enum:
- SWBExternalService.ListApplicationAccessScopes
requestBody:
required: true
content:
application/x-amz-json-1.1:
schema:
$ref: '#/components/schemas/ListApplicationAccessScopesRequest'
tags:
- Application Access Scope
components:
schemas:
ThrottlingException:
type: object
properties:
Message:
type: string
Reason:
type: string
enum:
- KMS_ThrottlingException
description: The reason for the throttling exception.
ListApplicationAccessScopesRequest:
type: object
properties:
ApplicationArn:
type: string
description: Specifies the ARN of the application.
MaxResults:
type: integer
description: Specifies the total number of results that you want included in each response. If additional items exist beyond the number you specify, the NextToken response element is returned with a value (not null). Include the specified value as the NextToken request parameter in the next call to the operation to get the next set of results. Note that the service might return fewer results than the maximum even when there are more results available. You should check NextToken after every operation to ensure that you receive all of the results.
NextToken:
type: string
description: Specifies that you want to receive the next page of results. Valid only if you received a NextToken response in the previous request. If you did, it indicates that more output is available. Set this parameter to the value provided by the previous call's NextToken response to request the next page of results.
required:
- ApplicationArn
ValidationException:
type: object
properties:
Message:
type: string
Reason:
type: string
enum:
- KMS_InvalidKeyUsageException
- KMS_InvalidStateException
- KMS_DisabledException
description: The reason for the validation exception.
ConflictException:
type: object
properties:
Message:
type: string
AccessDeniedException:
type: object
properties:
Message:
type: string
Reason:
type: string
enum:
- KMS_AccessDeniedException
description: The reason for the access denied exception.
ScopeDetails:
type: object
properties:
Scope:
type: string
description: The name of the access scope.
AuthorizedTargets:
type: array
items:
type: string
description: An array list of ARNs of applications.
required:
- Scope
GetApplicationAccessScopeResponse:
type: object
properties:
Scope:
type: string
description: The name of the access scope that can be used with the authorized targets.
AuthorizedTargets:
type: array
items:
type: string
description: An array of authorized targets associated with this access scope.
required:
- Scope
PutApplicationAccessScopeRequest:
type: object
properties:
Scope:
type: string
description: Specifies the name of the access scope to be associated with the specified targets.
AuthorizedTargets:
type: array
items:
type: string
description: Specifies an array list of ARNs that represent the authorized targets for this access scope.
ApplicationArn:
type: string
description: Specifies the ARN of the application with the access scope with the targets to add or update.
required:
- Scope
- ApplicationArn
GetApplicationAccessScopeRequest:
type: object
properties:
ApplicationArn:
type: string
description: Specifies the ARN of the application with the access scope that you want to retrieve.
Scope:
type: string
description: Specifies the name of the access scope for which you want the authorized targets.
required:
- ApplicationArn
- Scope
InternalServerException:
type: object
properties:
Message:
type: string
ListApplicationAccessScopesResponse:
type: object
properties:
Scopes:
type: array
items:
$ref: '#/components/schemas/ScopeDetails'
description: An array list of access scopes and their authorized targets that are associated with the application.
NextToken:
type: string
description: If present, this value indicates that more output is available than is included in the current response. Use this value in the NextToken request parameter in a subsequent call to the operation to get the next part of the output. You should repeat this until the NextToken response element comes back as null. This indicates that this is the last page of results.
required:
- Scopes
ResourceNotFoundException:
type: object
properties:
Message:
type: string
Reason:
type: string
enum:
- KMS_NotFoundException
description: The reason for the resource not found exception.
DeleteApplicationAccessScopeRequest:
type: object
properties:
ApplicationArn:
type: string
description: Specifies the ARN of the application with the access scope to delete.
Scope:
type: string
description: Specifies the name of the access scope to remove from the application.
required:
- ApplicationArn
- Scope
securitySchemes:
sigv4:
type: apiKey
in: header
name: Authorization
description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
x-aws-sigv4:
signingName: sso
x-provenance:
method: harvested
publisher: Amazon Web Services
source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/sso-admin/service/2020-07-20/sso-admin-2020-07-20.json
note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)