Amazon S3 Glacier S3 Glacier Access Policy API

The S3 Glacier Access Policy API from Amazon S3 Glacier — 1 operation(s) for s3 glacier access policy.

Operations 3

DELETE /{accountId}/vaults/{vaultName}/access-policy Delete Vault Access Policy #
GET /{accountId}/vaults/{vaultName}/access-policy Get Vault Access Policy #
PUT /{accountId}/vaults/{vaultName}/access-policy Set Vault Access Policy #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/amazon-s3-glacier:amazon-s3-glacier-access-policy-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

amazon-s3-glacier-access-policy-api-openapi.yml Raw ↑
openapi: 3.1.0
info:
  title: Amazon Glacier Access Policy API
  version: '2012-06-01'
  description: Generated from AWS's published Smithy model for Amazon Glacier. 3 operation(s).
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/contact-us/
  license:
    name: Apache 2.0
    identifier: Apache-2.0
    url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://glacier.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
security:
- sigv4: []
paths:
  /{accountId}/vaults/{vaultName}/access-policy:
    delete:
      operationId: DeleteVaultAccessPolicy
      summary: Delete Vault Access Policy
      description: This operation deletes the access policy associated with the specified vault. The operation is eventually
        consistent; that is, it might take some time for Amazon Glacier to completely remove the access policy, and you might
        still see the effect of the policy for a short time after you send the delete request. This operation is idempotent.
        You can invoke delete multiple times, even if there is no policy associated with the vault. For more information about
        vault access policies, see Amazon Glacier Access Control with Vault Access Policies.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: string
        '400':
          description: InvalidParameterValueException; MissingParameterValueException; NoLongerSupportedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InvalidParameterValueException'
        '404':
          description: ResourceNotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceNotFoundException'
        '500':
          description: ServiceUnavailableException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceUnavailableException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DeleteVaultAccessPolicyInput'
            example:
              accountId: '-'
              vaultName: examplevault
      tags:
      - Access Policy
    get:
      operationId: GetVaultAccessPolicy
      summary: Get Vault Access Policy
      description: This operation retrieves the access-policy subresource set on the vault; for more information on setting
        this subresource, see Set Vault Access Policy (PUT access-policy). If there is no access policy set on the vault,
        the operation returns a 404 Not found error. For more information about vault access policies, see Amazon Glacier
        Access Control with Vault Access Policies.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetVaultAccessPolicyOutput'
              example:
                policy:
                  Policy: '{"Version":"2012-10-17","Statement":[{"Sid":"Define-owner-access-rights","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::999999999999:root"},"Action":"glacier:DeleteArchive","Resource":"arn:aws:glacier:us-west-2:999999999999:vaults/examplevault"}]}'
        '400':
          description: InvalidParameterValueException; MissingParameterValueException; NoLongerSupportedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InvalidParameterValueException'
        '404':
          description: ResourceNotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceNotFoundException'
        '500':
          description: ServiceUnavailableException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceUnavailableException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GetVaultAccessPolicyInput'
            example:
              accountId: '-'
              vaultName: example-vault
      tags:
      - Access Policy
    put:
      operationId: SetVaultAccessPolicy
      summary: Set Vault Access Policy
      description: This operation configures an access policy for a vault and will overwrite an existing policy. To configure
        a vault access policy, send a PUT request to the access-policy subresource of the vault. An access policy is specific
        to a vault and is also called a vault subresource. You can set one access policy per vault and the policy can be up
        to 20 KB in size. For more information about vault access policies, see Amazon Glacier Access Control with Vault Access
        Policies.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: string
        '400':
          description: InvalidParameterValueException; MissingParameterValueException; NoLongerSupportedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InvalidParameterValueException'
        '404':
          description: ResourceNotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceNotFoundException'
        '500':
          description: ServiceUnavailableException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceUnavailableException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SetVaultAccessPolicyInput'
            example:
              accountId: '-'
              vaultName: examplevault
              policy:
                Policy: '{"Version":"2012-10-17","Statement":[{"Sid":"Define-owner-access-rights","Effect":"Allow","Principal":{"AWS":"arn:aws:iam::999999999999:root"},"Action":"glacier:DeleteArchive","Resource":"arn:aws:glacier:us-west-2:999999999999:vaults/examplevault"}]}'
      tags:
      - Access Policy
components:
  securitySchemes:
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical
        request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: glacier
  schemas:
    DeleteVaultAccessPolicyInput:
      type: object
      properties:
        accountId:
          type: string
          description: The AccountId value is the AWS account ID of the account that owns the vault. You can either specify
            an AWS account ID or optionally a single '-' (hyphen), in which case Amazon Glacier uses the AWS account ID associated
            with the credentials used to sign the request. If you use an account ID, do not include any hyphens ('-') in the
            ID.
        vaultName:
          type: string
          description: The name of the vault.
      required:
      - accountId
      - vaultName
    GetVaultAccessPolicyInput:
      type: object
      properties:
        accountId:
          type: string
          description: The AccountId value is the AWS account ID of the account that owns the vault. You can either specify
            an AWS account ID or optionally a single '-' (hyphen), in which case Amazon Glacier uses the AWS account ID associated
            with the credentials used to sign the request. If you use an account ID, do not include any hyphens ('-') in the
            ID.
        vaultName:
          type: string
          description: The name of the vault.
      required:
      - accountId
      - vaultName
    GetVaultAccessPolicyOutput:
      type: object
      properties:
        policy:
          $ref: '#/components/schemas/VaultAccessPolicy'
    InvalidParameterValueException:
      type: object
      properties:
        type:
          type: string
          description: Client
        code:
          type: string
          description: 400 Bad Request
        message:
          type: string
          description: Returned if a parameter of the request is incorrectly specified.
    ResourceNotFoundException:
      type: object
      properties:
        type:
          type: string
          description: Client
        code:
          type: string
          description: 404 Not Found
        message:
          type: string
          description: Returned if the specified resource (such as a vault, upload ID, or job ID) doesn't exist.
    ServiceUnavailableException:
      type: object
      properties:
        type:
          type: string
          description: Server
        code:
          type: string
          description: 500 Internal Server Error
        message:
          type: string
          description: Returned if the service cannot complete the request.
    SetVaultAccessPolicyInput:
      type: object
      properties:
        accountId:
          type: string
          description: The AccountId value is the AWS account ID of the account that owns the vault. You can either specify
            an AWS account ID or optionally a single '-' (hyphen), in which case Amazon Glacier uses the AWS account ID associated
            with the credentials used to sign the request. If you use an account ID, do not include any hyphens ('-') in the
            ID.
        vaultName:
          type: string
          description: The name of the vault.
        policy:
          $ref: '#/components/schemas/VaultAccessPolicy'
      required:
      - accountId
      - vaultName
    VaultAccessPolicy:
      type: object
      properties:
        Policy:
          type: string
          description: The vault access policy.
x-provenance:
  method: harvested
  publisher: Amazon Web Services
  source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/glacier/service/2012-06-01/glacier-2012-06-01.json
  note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)