Amazon Managed Grafana Managed Grafana Tokens API
The Managed Grafana Tokens API from Amazon Managed Grafana — 2 operation(s) for managed grafana tokens.
The Managed Grafana Tokens API from Amazon Managed Grafana — 2 operation(s) for managed grafana tokens.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/amazon-managed-grafana:amazon-managed-grafana-tokens-api"
curl "https://apis.io/api/v1/apis?limit=25"
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Amazon Managed Grafana Tokens API
version: '2020-08-18'
description: Generated from AWS's published Smithy model for Amazon Managed Grafana. 3 operation(s).
contact:
name: Amazon Web Services
url: https://aws.amazon.com/contact-us/
license:
name: Apache 2.0
identifier: Apache-2.0
url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://grafana.{region}.amazonaws.com
variables:
region:
default: us-east-1
security:
- sigv4: []
tags:
- name: Tokens
paths:
/workspaces/{workspaceId}/serviceaccounts/{serviceAccountId}/tokens:
post:
operationId: CreateWorkspaceServiceAccountToken
summary: Create Workspace Service Account Token
description: Creates a token that can be used to authenticate and authorize Grafana HTTP API operations for the given workspace service account. The service account acts as a user for the API operations, and defines the permissions that are used by the API. When you create the service account token, you will receive a key that is used when calling Grafana APIs. Do not lose this key, as it will not be retrievable again. If you do lose the key, you can delete the token and recreate it to receive a new key. This will disable the initial key. Service accounts are only available for workspaces that are compatible with Grafana version 9 and above.
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/CreateWorkspaceServiceAccountTokenResponse'
'403':
description: AccessDeniedException
content:
application/json:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'409':
description: ConflictException
content:
application/json:
schema:
$ref: '#/components/schemas/ConflictException'
'500':
description: InternalServerException
content:
application/json:
schema:
$ref: '#/components/schemas/InternalServerException'
'404':
description: ResourceNotFoundException
content:
application/json:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'402':
description: ServiceQuotaExceededException
content:
application/json:
schema:
$ref: '#/components/schemas/ServiceQuotaExceededException'
'429':
description: ThrottlingException
content:
application/json:
schema:
$ref: '#/components/schemas/ThrottlingException'
'400':
description: ValidationException
content:
application/json:
schema:
$ref: '#/components/schemas/ValidationException'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/CreateWorkspaceServiceAccountTokenRequest'
tags:
- Tokens
get:
operationId: ListWorkspaceServiceAccountTokens
summary: List Workspace Service Account Tokens
description: Returns a list of tokens for a workspace service account. This does not return the key for each token. You cannot access keys after they are created. To create a new key, delete the token and recreate it. Service accounts are only available for workspaces that are compatible with Grafana version 9 and above.
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/ListWorkspaceServiceAccountTokensResponse'
'403':
description: AccessDeniedException
content:
application/json:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'409':
description: ConflictException
content:
application/json:
schema:
$ref: '#/components/schemas/ConflictException'
'500':
description: InternalServerException
content:
application/json:
schema:
$ref: '#/components/schemas/InternalServerException'
'404':
description: ResourceNotFoundException
content:
application/json:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'429':
description: ThrottlingException
content:
application/json:
schema:
$ref: '#/components/schemas/ThrottlingException'
'400':
description: ValidationException
content:
application/json:
schema:
$ref: '#/components/schemas/ValidationException'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/ListWorkspaceServiceAccountTokensRequest'
tags:
- Tokens
/workspaces/{workspaceId}/serviceaccounts/{serviceAccountId}/tokens/{tokenId}:
delete:
operationId: DeleteWorkspaceServiceAccountToken
summary: Delete Workspace Service Account Token
description: Deletes a token for the workspace service account. This will disable the key associated with the token. If any automation is currently using the key, it will no longer be authenticated or authorized to perform actions with the Grafana HTTP APIs. Service accounts are only available for workspaces that are compatible with Grafana version 9 and above.
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/DeleteWorkspaceServiceAccountTokenResponse'
'403':
description: AccessDeniedException
content:
application/json:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'409':
description: ConflictException
content:
application/json:
schema:
$ref: '#/components/schemas/ConflictException'
'500':
description: InternalServerException
content:
application/json:
schema:
$ref: '#/components/schemas/InternalServerException'
'404':
description: ResourceNotFoundException
content:
application/json:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'429':
description: ThrottlingException
content:
application/json:
schema:
$ref: '#/components/schemas/ThrottlingException'
'400':
description: ValidationException
content:
application/json:
schema:
$ref: '#/components/schemas/ValidationException'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/DeleteWorkspaceServiceAccountTokenRequest'
tags:
- Tokens
components:
schemas:
ListWorkspaceServiceAccountTokensRequest:
type: object
properties:
maxResults:
type: integer
description: The maximum number of tokens to include in the results.
nextToken:
type: string
description: The token for the next set of service accounts to return. (You receive this token from a previous ListWorkspaceServiceAccountTokens operation.)
serviceAccountId:
type: string
description: The ID of the service account for which to return tokens.
workspaceId:
type: string
description: The ID of the workspace for which to return tokens.
required:
- serviceAccountId
- workspaceId
ValidationExceptionField:
type: object
properties:
name:
type: string
description: The name of the field that caused the validation error.
message:
type: string
description: A message describing why this field couldn't be validated.
required:
- name
- message
ListWorkspaceServiceAccountTokensResponse:
type: object
properties:
nextToken:
type: string
description: The token to use when requesting the next set of service accounts.
serviceAccountTokens:
type: array
items:
$ref: '#/components/schemas/ServiceAccountTokenSummary'
description: An array of structures containing information about the tokens.
serviceAccountId:
type: string
description: The ID of the service account where the tokens reside.
workspaceId:
type: string
description: The ID of the workspace where the tokens reside.
required:
- serviceAccountTokens
- serviceAccountId
- workspaceId
AccessDeniedException:
type: object
properties:
message:
type: string
required:
- message
CreateWorkspaceServiceAccountTokenResponse:
type: object
properties:
serviceAccountToken:
$ref: '#/components/schemas/ServiceAccountTokenSummaryWithKey'
serviceAccountId:
type: string
description: The ID of the service account where the token was created.
workspaceId:
type: string
description: The ID of the workspace where the token was created.
required:
- serviceAccountToken
- serviceAccountId
- workspaceId
DeleteWorkspaceServiceAccountTokenResponse:
type: object
properties:
tokenId:
type: string
description: The ID of the token that was deleted.
serviceAccountId:
type: string
description: The ID of the service account where the token was deleted.
workspaceId:
type: string
description: The ID of the workspace where the token was deleted.
required:
- tokenId
- serviceAccountId
- workspaceId
InternalServerException:
type: object
properties:
message:
type: string
description: A description of the error.
retryAfterSeconds:
type: integer
description: How long to wait before you retry this operation.
required:
- message
CreateWorkspaceServiceAccountTokenRequest:
type: object
properties:
name:
type: string
description: A name for the token to create.
secondsToLive:
type: integer
description: Sets how long the token will be valid, in seconds. You can set the time up to 30 days in the future.
serviceAccountId:
type: string
description: The ID of the service account for which to create a token.
workspaceId:
type: string
description: The ID of the workspace the service account resides within.
required:
- name
- secondsToLive
- serviceAccountId
- workspaceId
ValidationException:
type: object
properties:
message:
type: string
description: A description of the error.
reason:
type: string
description: The reason that the operation failed.
fieldList:
type: array
items:
$ref: '#/components/schemas/ValidationExceptionField'
description: A list of fields that might be associated with the error.
required:
- message
- reason
ResourceNotFoundException:
type: object
properties:
message:
type: string
description: The value of a parameter in the request caused an error.
resourceId:
type: string
description: The ID of the resource that is associated with the error.
resourceType:
type: string
description: The type of the resource that is associated with the error.
required:
- message
- resourceId
- resourceType
ThrottlingException:
type: object
properties:
message:
type: string
description: A description of the error.
serviceCode:
type: string
description: The ID of the service that is associated with the error.
quotaCode:
type: string
description: The ID of the service quota that was exceeded.
retryAfterSeconds:
type: integer
description: The value of a parameter in the request caused an error.
required:
- message
ServiceAccountTokenSummary:
type: object
properties:
id:
type: string
description: The unique ID of the service account token.
name:
type: string
description: The name of the service account token.
createdAt:
type: string
description: When the service account token was created.
expiresAt:
type: string
description: When the service account token will expire.
lastUsedAt:
type: string
description: The last time the token was used to authorize a Grafana HTTP API.
required:
- id
- name
- createdAt
- expiresAt
ServiceAccountTokenSummaryWithKey:
type: object
properties:
id:
type: string
description: The unique ID of the service account token.
name:
type: string
description: The name of the service account token.
key:
type: string
description: The key for the service account token. Used when making calls to the Grafana HTTP APIs to authenticate and authorize the requests.
required:
- id
- name
- key
ServiceQuotaExceededException:
type: object
properties:
message:
type: string
description: A description of the error.
resourceId:
type: string
description: The ID of the resource that is associated with the error.
resourceType:
type: string
description: The type of the resource that is associated with the error.
serviceCode:
type: string
description: The value of a parameter in the request caused an error.
quotaCode:
type: string
description: The ID of the service quota that was exceeded.
required:
- message
- resourceId
- resourceType
- serviceCode
- quotaCode
DeleteWorkspaceServiceAccountTokenRequest:
type: object
properties:
tokenId:
type: string
description: The ID of the token to delete.
serviceAccountId:
type: string
description: The ID of the service account from which to delete the token.
workspaceId:
type: string
description: The ID of the workspace from which to delete the token.
required:
- tokenId
- serviceAccountId
- workspaceId
ConflictException:
type: object
properties:
message:
type: string
description: A description of the error.
resourceId:
type: string
description: The ID of the resource that is associated with the error.
resourceType:
type: string
description: The type of the resource that is associated with the error.
required:
- message
- resourceId
- resourceType
securitySchemes:
sigv4:
type: apiKey
in: header
name: Authorization
description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
x-aws-sigv4:
signingName: grafana
x-provenance:
method: harvested
publisher: Amazon Web Services
source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/grafana/service/2020-08-18/grafana-2020-08-18.json
note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)