The Transfer Certificate API from Amazon IoT Core — 1 operation(s) for transfer certificate.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/amazon-iot-core:amazon-iot-core-transfer-certificate-api"curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Amazon Iot Core Transfer Certificate API
x-refined-note:
- x-apiClientRegistration differs across the merged source definitions and was not carried
- x-apisguru-categories differs across the merged source definitions and was not carried
- x-aws-signingName differs across the merged source definitions and was not carried
- x-logo differs across the merged source definitions and was not carried
- x-origin differs across the merged source definitions and was not carried
- x-preferred differs across the merged source definitions and was not carried
- x-providerName differs across the merged source definitions and was not carried
- x-release differs across the merged source definitions and was not carried
- x-serviceName differs across the merged source definitions and was not carried
version: '1.0'
description: 'Operations tagged Transfer Certificate across 2 of this provider''s published API definitions: amazon-iot-core-openapi-original.yml, amazon-iot-core-transfer-certificate-api-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: http://iot.{region}.amazonaws.com
variables:
region:
description: The AWS region
enum:
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- us-gov-west-1
- us-gov-east-1
- ca-central-1
- eu-north-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-central-1
- eu-south-1
- af-south-1
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-southeast-1
- ap-southeast-2
- ap-east-1
- ap-south-1
- sa-east-1
- me-south-1
default: us-east-1
description: The AWS IoT multi-region endpoint
- url: https://iot.{region}.amazonaws.com
variables:
region:
description: The AWS region
enum:
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- us-gov-west-1
- us-gov-east-1
- ca-central-1
- eu-north-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-central-1
- eu-south-1
- af-south-1
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-southeast-1
- ap-southeast-2
- ap-east-1
- ap-south-1
- sa-east-1
- me-south-1
default: us-east-1
description: The AWS IoT multi-region endpoint
- url: http://iot.{region}.amazonaws.com.cn
variables:
region:
description: The AWS region
enum:
- cn-north-1
- cn-northwest-1
default: cn-north-1
description: The AWS IoT endpoint for China (Beijing) and China (Ningxia)
- url: https://iot.{region}.amazonaws.com.cn
variables:
region:
description: The AWS region
enum:
- cn-north-1
- cn-northwest-1
default: cn-north-1
description: The AWS IoT endpoint for China (Beijing) and China (Ningxia)
tags:
- name: Transfer Certificate
paths:
/transfer-certificate/{certificateId}#targetAwsAccount:
parameters:
- $ref: '#/components/parameters/X-Amz-Content-Sha256'
- $ref: '#/components/parameters/X-Amz-Date'
- $ref: '#/components/parameters/X-Amz-Algorithm'
- $ref: '#/components/parameters/X-Amz-Credential'
- $ref: '#/components/parameters/X-Amz-Security-Token'
- $ref: '#/components/parameters/X-Amz-Signature'
- $ref: '#/components/parameters/X-Amz-SignedHeaders'
patch:
operationId: TransferCertificate
description: 'Transfers the specified certificate to the specified Amazon Web Services account.
Requires permission to access the TransferCertificate action.
You can cancel the transfer until it is acknowledged by the recipient.
No notification is sent to the transfer destination''s account. It is up to the caller to notify the transfer target.
The certificate being transferred must not be in the ACTIVE state. You can use the UpdateCertificate action to deactivate it.
The certificate must not have any policies attached to it. You can use the DetachPolicy action to detach them.'
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/TransferCertificateResponse'
'480':
description: InvalidRequestException
content:
application/json:
schema:
$ref: '#/components/schemas/InvalidRequestException'
'481':
description: ResourceNotFoundException
content:
application/json:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'482':
description: CertificateStateException
content:
application/json:
schema:
$ref: '#/components/schemas/CertificateStateException'
'483':
description: TransferConflictException
content:
application/json:
schema:
$ref: '#/components/schemas/TransferConflictException'
'484':
description: ThrottlingException
content:
application/json:
schema:
$ref: '#/components/schemas/ThrottlingException'
'485':
description: UnauthorizedException
content:
application/json:
schema:
$ref: '#/components/schemas/UnauthorizedException'
'486':
description: ServiceUnavailableException
content:
application/json:
schema:
$ref: '#/components/schemas/ServiceUnavailableException'
'487':
description: InternalFailureException
content:
application/json:
schema:
$ref: '#/components/schemas/InternalFailureException'
parameters:
- name: certificateId
in: path
required: true
description: The ID of the certificate. (The last part of the certificate ARN contains the certificate ID.)
schema:
type: string
pattern: (0x)?[a-fA-F0-9]+
minLength: 64
maxLength: 64
- name: targetAwsAccount
in: query
required: true
description: The Amazon Web Services account.
schema:
type: string
pattern: '[0-9]+'
minLength: 12
maxLength: 12
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
transferMessage:
description: The transfer message.
type: string
pattern: '[\s\S]*'
maxLength: 128
summary: Amazon IoT Core Transfer Certificate
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
tags:
- Transfer Certificate
security:
- hmac: []
servers:
- url: http://iot.{region}.amazonaws.com
variables:
region:
description: The AWS region
enum:
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- us-gov-west-1
- us-gov-east-1
- ca-central-1
- eu-north-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-central-1
- eu-south-1
- af-south-1
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-southeast-1
- ap-southeast-2
- ap-east-1
- ap-south-1
- sa-east-1
- me-south-1
default: us-east-1
description: The AWS IoT multi-region endpoint
- url: https://iot.{region}.amazonaws.com
variables:
region:
description: The AWS region
enum:
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- us-gov-west-1
- us-gov-east-1
- ca-central-1
- eu-north-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-central-1
- eu-south-1
- af-south-1
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-southeast-1
- ap-southeast-2
- ap-east-1
- ap-south-1
- sa-east-1
- me-south-1
default: us-east-1
description: The AWS IoT multi-region endpoint
- url: http://iot.{region}.amazonaws.com.cn
variables:
region:
description: The AWS region
enum:
- cn-north-1
- cn-northwest-1
default: cn-north-1
description: The AWS IoT endpoint for China (Beijing) and China (Ningxia)
- url: https://iot.{region}.amazonaws.com.cn
variables:
region:
description: The AWS region
enum:
- cn-north-1
- cn-northwest-1
default: cn-north-1
description: The AWS IoT endpoint for China (Beijing) and China (Ningxia)
/transfer-certificate/{certificateId}:
patch:
operationId: patchTransferCertificateByCertificateId
summary: Transfer Certificate
description: 'Transfers the specified certificate to the specified Amazon Web Services account. Requires permission to access the TransferCertificate action. You can cancel the transfer until it is accepted by the recipient. No notification is sent to the transfer destination''s account. The caller is responsible for notifying the transfer target. The certificate being transferred must not be in the ACTIVE state. You can use the UpdateCertificate action to deactivate it. The certificate must not have any policies attached to it. You can use the DetachPolicy action to detach them. Customer managed key behavior: When you use a customer managed key to encrypt your data and then transfer the certificate to a customer in a different account using the TransferCertificate operation, the certificates will no longer be encrypted by their customer managed key configuration. During the transfer process, certificates are encrypted using Amazon Web Services IoT Core owned keys. While a certificate is in the PENDING_TRANSFER state, it''s always protected by Amazon Web Services IoT Core owned keys, regardless of the customer managed key configuration of either the source or destination account. Once the transfer'
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/TransferCertificateResponse_2'
'406':
description: CertificateStateException
content:
application/json:
schema:
$ref: '#/components/schemas/CertificateStateException_2'
'500':
description: InternalFailureException
content:
application/json:
schema:
$ref: '#/components/schemas/InternalFailureException_2'
'400':
description: InvalidRequestException; ThrottlingException
content:
application/json:
schema:
$ref: '#/components/schemas/InvalidRequestException_2'
'404':
description: ResourceNotFoundException
content:
application/json:
schema:
$ref: '#/components/schemas/ResourceNotFoundException_2'
'503':
description: ServiceUnavailableException
content:
application/json:
schema:
$ref: '#/components/schemas/ServiceUnavailableException_2'
'409':
description: TransferConflictException
content:
application/json:
schema:
$ref: '#/components/schemas/TransferConflictException_2'
'401':
description: UnauthorizedException
content:
application/json:
schema:
$ref: '#/components/schemas/UnauthorizedException_2'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/TransferCertificateRequest'
tags:
- Transfer Certificate
security:
- sigv4: []
x-operation-id-source: normalized
x-operation-id-original: TransferCertificate
servers:
- url: https://iot.{region}.amazonaws.com
variables:
region:
default: us-east-1
components:
schemas:
TransferConflictException: {}
ResourceNotFoundException: {}
ServiceUnavailableException: {}
UnauthorizedException: {}
InternalFailureException: {}
CertificateArn:
type: string
TransferCertificateResponse:
type: object
properties:
transferredCertificateArn:
allOf:
- $ref: '#/components/schemas/CertificateArn'
- description: The ARN of the certificate.
description: The output from the TransferCertificate operation.
CertificateStateException: {}
ThrottlingException: {}
InvalidRequestException: {}
TransferConflictException_2:
type: object
properties:
message:
type: string
description: The message for the exception.
TransferCertificateRequest:
type: object
properties:
certificateId:
type: string
description: The ID of the certificate. (The last part of the certificate ARN contains the certificate ID.)
targetAwsAccount:
type: string
description: The Amazon Web Services account.
transferMessage:
type: string
description: The transfer message.
required:
- certificateId
- targetAwsAccount
ServiceUnavailableException_2:
type: object
properties:
message:
type: string
description: The message for the exception.
UnauthorizedException_2:
type: object
properties:
message:
type: string
description: The message for the exception.
InternalFailureException_2:
type: object
properties:
message:
type: string
description: The message for the exception.
TransferCertificateResponse_2:
type: object
properties:
transferredCertificateArn:
type: string
description: The ARN of the certificate.
CertificateStateException_2:
type: object
properties:
message:
type: string
description: The message for the exception.
ResourceNotFoundException_2:
type: object
properties:
message:
type: string
description: The message for the exception.
InvalidRequestException_2:
type: object
properties:
message:
type: string
description: The message for the exception.
parameters:
X-Amz-SignedHeaders:
name: X-Amz-SignedHeaders
in: header
schema:
type: string
required: false
X-Amz-Security-Token:
name: X-Amz-Security-Token
in: header
schema:
type: string
required: false
X-Amz-Date:
name: X-Amz-Date
in: header
schema:
type: string
required: false
X-Amz-Signature:
name: X-Amz-Signature
in: header
schema:
type: string
required: false
X-Amz-Credential:
name: X-Amz-Credential
in: header
schema:
type: string
required: false
X-Amz-Content-Sha256:
name: X-Amz-Content-Sha256
in: header
schema:
type: string
required: false
X-Amz-Algorithm:
name: X-Amz-Algorithm
in: header
schema:
type: string
required: false
securitySchemes:
hmac:
type: apiKey
name: Authorization
in: header
description: Amazon Signature authorization v4
x-amazon-apigateway-authtype: awsSigv4
sigv4:
type: apiKey
in: header
name: Authorization
description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
x-aws-sigv4:
signingName: iot
externalDocs:
description: Amazon Web Services documentation
url: https://docs.aws.amazon.com/iot/
x-refined-from:
- amazon-iot-core-openapi-original.yml
- amazon-iot-core-transfer-certificate-api-openapi.yml
x-hasEquivalentPaths: true