Amazon Serverless Application Repository

Amazon Serverless Application Repository Policies API

Application policy management

Documentation GitHub OpenAPI

Operations 2

GET /applications/{ApplicationId}/policy Get Application Policy #

PUT /applications/{ApplicationId}/policy Put Application Policy #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/amazon-serverless-application-repository:amazon-serverless-application-repository-policies-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.1.0
info:
  title: AWSServerlessApplicationRepository Policies API
  version: '2017-09-08'
  description: Generated from AWS's published Smithy model for AWSServerlessApplicationRepository. 2 operation(s).
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/contact-us/
  license:
    name: Apache 2.0
    identifier: Apache-2.0
    url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://serverlessrepo.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
security:
- sigv4: []
paths:
  /applications/{ApplicationId}/policy:
    get:
      operationId: GetApplicationPolicy
      summary: Get Application Policy
      description: Retrieves the policy for the application.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetApplicationPolicyResponse'
        '400':
          description: BadRequestException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BadRequestException'
        '403':
          description: ForbiddenException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ForbiddenException'
        '500':
          description: InternalServerErrorException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerErrorException'
        '404':
          description: NotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotFoundException'
        '429':
          description: TooManyRequestsException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GetApplicationPolicyRequest'
      tags:
      - Policies
    put:
      operationId: PutApplicationPolicy
      summary: Put Application Policy
      description: Sets the permission policy for an application. For the list of actions supported for this operation, see
        Application Permissions .
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PutApplicationPolicyResponse'
        '400':
          description: BadRequestException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BadRequestException'
        '403':
          description: ForbiddenException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ForbiddenException'
        '500':
          description: InternalServerErrorException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerErrorException'
        '404':
          description: NotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NotFoundException'
        '429':
          description: TooManyRequestsException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PutApplicationPolicyRequest'
      tags:
      - Policies
components:
  securitySchemes:
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical
        request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: serverlessrepo
  schemas:
    ApplicationPolicyStatement:
      type: object
      properties:
        Actions:
          type: array
          items:
            type: string
          description: For the list of actions supported for this operation, see Application Permissions.
        PrincipalOrgIDs:
          type: array
          items:
            type: string
          description: An array of PrinciplalOrgIDs, which corresponds to AWS IAM aws:PrincipalOrgID global condition key.
        Principals:
          type: array
          items:
            type: string
          description: An array of AWS account IDs, or * to make the application public.
        StatementId:
          type: string
          description: A unique ID for the statement.
      required:
      - Actions
      - Principals
    BadRequestException:
      type: object
      properties:
        ErrorCode:
          type: string
          description: '400'
        Message:
          type: string
          description: One of the parameters in the request is invalid.
    ForbiddenException:
      type: object
      properties:
        ErrorCode:
          type: string
          description: '403'
        Message:
          type: string
          description: The client is not authenticated.
    GetApplicationPolicyRequest:
      type: object
      properties:
        ApplicationId:
          type: string
          description: The Amazon Resource Name (ARN) of the application.
      required:
      - ApplicationId
    GetApplicationPolicyResponse:
      type: object
      properties:
        Statements:
          type: array
          items:
            $ref: '#/components/schemas/ApplicationPolicyStatement'
          description: An array of policy statements applied to the application.
    InternalServerErrorException:
      type: object
      properties:
        ErrorCode:
          type: string
          description: '500'
        Message:
          type: string
          description: The AWS Serverless Application Repository service encountered an internal error.
    NotFoundException:
      type: object
      properties:
        ErrorCode:
          type: string
          description: '404'
        Message:
          type: string
          description: The resource (for example, an access policy statement) specified in the request doesn't exist.
    PutApplicationPolicyRequest:
      type: object
      properties:
        ApplicationId:
          type: string
          description: The Amazon Resource Name (ARN) of the application.
        Statements:
          type: array
          items:
            $ref: '#/components/schemas/ApplicationPolicyStatement'
          description: An array of policy statements applied to the application.
      required:
      - ApplicationId
      - Statements
    PutApplicationPolicyResponse:
      type: object
      properties:
        Statements:
          type: array
          items:
            $ref: '#/components/schemas/ApplicationPolicyStatement'
          description: An array of policy statements applied to the application.
    TooManyRequestsException:
      type: object
      properties:
        ErrorCode:
          type: string
          description: '429'
        Message:
          type: string
          description: The client is sending more than the allowed number of requests per unit of time.
x-provenance:
  method: harvested
  publisher: Amazon Web Services
  source: https://raw.githubusercontent.com/aws/api-models-aws/3cd98287b471c106254abd89279cc87308d38bfd/models/serverlessapplicationrepository/service/2017-09-08/serverlessapplicationrepository-2017-09-08.json
  note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)