Amazon S3 Glacier S3 Glacier Access Policy API
The S3 Glacier Access Policy API from Amazon S3 Glacier — 1 operation(s) for s3 glacier access policy.
The S3 Glacier Access Policy API from Amazon S3 Glacier — 1 operation(s) for s3 glacier access policy.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/amazon-s3-glacier:amazon-s3-glacier-access-policy-api"
curl "https://apis.io/api/v1/apis?limit=25"
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.1.0
info:
title: Amazon Glacier Access Policy API
version: '2012-06-01'
description: Generated from AWS's published Smithy model for Amazon Glacier. 3 operation(s).
contact:
name: Amazon Web Services
url: https://aws.amazon.com/contact-us/
license:
name: Apache 2.0
identifier: Apache-2.0
url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://glacier.{region}.amazonaws.com
variables:
region:
default: us-east-1
security:
- sigv4: []
paths:
/{accountId}/vaults/{vaultName}/access-policy:
delete:
operationId: DeleteVaultAccessPolicy
summary: Delete Vault Access Policy
description: This operation deletes the access policy associated with the specified vault. The operation is eventually
consistent; that is, it might take some time for Amazon Glacier to completely remove the access policy, and you might
still see the effect of the policy for a short time after you send the delete request. This operation is idempotent.
You can invoke delete multiple times, even if there is no policy associated with the vault. For more information about
vault access policies, see Amazon Glacier Access Control with Vault Access Policies.
responses:
'200':
description: Success
content:
application/json:
schema:
type: string
'400':
description: InvalidParameterValueException; MissingParameterValueException; NoLongerSupportedException
content:
application/json:
schema:
$ref: '#/components/schemas/InvalidParameterValueException'
'404':
description: ResourceNotFoundException
content:
application/json:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'500':
description: ServiceUnavailableException
content:
application/json:
schema:
$ref: '#/components/schemas/ServiceUnavailableException'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/DeleteVaultAccessPolicyInput'
example:
accountId: '-'
vaultName: examplevault
tags:
- Access Policy
get:
operationId: GetVaultAccessPolicy
summary: Get Vault Access Policy
description: This operation retrieves the access-policy subresource set on the vault; for more information on setting
this subresource, see Set Vault Access Policy (PUT access-policy). If there is no access policy set on the vault,
the operation returns a 404 Not found error. For more information about vault access policies, see Amazon Glacier
Access Control with Vault Access Policies.
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/GetVaultAccessPolicyOutput'
example:
policy:
Policy: '{"Version":"2012-10-17","Statement":[{"Sid":"Define-owner-access-rights","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::999999999999:root"},"Action":"glacier:DeleteArchive","Resource":"arn:aws:glacier:us-west-2:999999999999:vaults/examplevault"}]}'
'400':
description: InvalidParameterValueException; MissingParameterValueException; NoLongerSupportedException
content:
application/json:
schema:
$ref: '#/components/schemas/InvalidParameterValueException'
'404':
description: ResourceNotFoundException
content:
application/json:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'500':
description: ServiceUnavailableException
content:
application/json:
schema:
$ref: '#/components/schemas/ServiceUnavailableException'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/GetVaultAccessPolicyInput'
example:
accountId: '-'
vaultName: example-vault
tags:
- Access Policy
put:
operationId: SetVaultAccessPolicy
summary: Set Vault Access Policy
description: This operation configures an access policy for a vault and will overwrite an existing policy. To configure
a vault access policy, send a PUT request to the access-policy subresource of the vault. An access policy is specific
to a vault and is also called a vault subresource. You can set one access policy per vault and the policy can be up
to 20 KB in size. For more information about vault access policies, see Amazon Glacier Access Control with Vault Access
Policies.
responses:
'200':
description: Success
content:
application/json:
schema:
type: string
'400':
description: InvalidParameterValueException; MissingParameterValueException; NoLongerSupportedException
content:
application/json:
schema:
$ref: '#/components/schemas/InvalidParameterValueException'
'404':
description: ResourceNotFoundException
content:
application/json:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
'500':
description: ServiceUnavailableException
content:
application/json:
schema:
$ref: '#/components/schemas/ServiceUnavailableException'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/SetVaultAccessPolicyInput'
example:
accountId: '-'
vaultName: examplevault
policy:
Policy: '{"Version":"2012-10-17","Statement":[{"Sid":"Define-owner-access-rights","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::999999999999:root"},"Action":"glacier:DeleteArchive","Resource":"arn:aws:glacier:us-west-2:999999999999:vaults/examplevault"}]}'
tags:
- Access Policy
components:
securitySchemes:
sigv4:
type: apiKey
in: header
name: Authorization
description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical
request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
x-aws-sigv4:
signingName: glacier
schemas:
DeleteVaultAccessPolicyInput:
type: object
properties:
accountId:
type: string
description: The AccountId value is the AWS account ID of the account that owns the vault. You can either specify
an AWS account ID or optionally a single '-' (hyphen), in which case Amazon Glacier uses the AWS account ID associated
with the credentials used to sign the request. If you use an account ID, do not include any hyphens ('-') in the
ID.
vaultName:
type: string
description: The name of the vault.
required:
- accountId
- vaultName
GetVaultAccessPolicyInput:
type: object
properties:
accountId:
type: string
description: The AccountId value is the AWS account ID of the account that owns the vault. You can either specify
an AWS account ID or optionally a single '-' (hyphen), in which case Amazon Glacier uses the AWS account ID associated
with the credentials used to sign the request. If you use an account ID, do not include any hyphens ('-') in the
ID.
vaultName:
type: string
description: The name of the vault.
required:
- accountId
- vaultName
GetVaultAccessPolicyOutput:
type: object
properties:
policy:
$ref: '#/components/schemas/VaultAccessPolicy'
InvalidParameterValueException:
type: object
properties:
type:
type: string
description: Client
code:
type: string
description: 400 Bad Request
message:
type: string
description: Returned if a parameter of the request is incorrectly specified.
ResourceNotFoundException:
type: object
properties:
type:
type: string
description: Client
code:
type: string
description: 404 Not Found
message:
type: string
description: Returned if the specified resource (such as a vault, upload ID, or job ID) doesn't exist.
ServiceUnavailableException:
type: object
properties:
type:
type: string
description: Server
code:
type: string
description: 500 Internal Server Error
message:
type: string
description: Returned if the service cannot complete the request.
SetVaultAccessPolicyInput:
type: object
properties:
accountId:
type: string
description: The AccountId value is the AWS account ID of the account that owns the vault. You can either specify
an AWS account ID or optionally a single '-' (hyphen), in which case Amazon Glacier uses the AWS account ID associated
with the credentials used to sign the request. If you use an account ID, do not include any hyphens ('-') in the
ID.
vaultName:
type: string
description: The name of the vault.
policy:
$ref: '#/components/schemas/VaultAccessPolicy'
required:
- accountId
- vaultName
VaultAccessPolicy:
type: object
properties:
Policy:
type: string
description: The vault access policy.
x-provenance:
method: harvested
publisher: Amazon Web Services
source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/glacier/service/2012-06-01/glacier-2012-06-01.json
note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)