Amazon Web Services Accessgrantsinstance API
The Accessgrantsinstance API from Amazon Web Services — 11 operation(s) for accessgrantsinstance.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/amazon-web-services-accessgrantsinstance-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Amazon Web Services s3control Accessgrantsinstance API
description: Amazon Web Services S3 Control provides access to Amazon S3 control plane actions.
tags:
- name: Accessgrantsinstance
paths:
/v20180820/accessgrantsinstance/identitycenter:
DELETE:
summary: Amazon Web Services Dissociateaccessgrantsidentitycenter
description: Dissociates the Amazon Web Services IAM Identity Center instance from the S3 Access Grants instance. Permissions You must have the s3:DissociateAccessGrantsIdentityCenter permission to use this operation. Additional Permissions You must have the sso:DeleteApplication permission to use this operation.
operationId: amazonWebServicesDissociateAccessGrantsIdentityCenter
tags:
- Accessgrantsinstance
/v20180820/accessgrantsinstance/grant:
POST:
summary: Amazon Web Services Createaccessgrant
description: Creates an access grant that gives a grantee access to your S3 data. The grantee can be an IAM user or role or a directory user, or group. Before you can create a grant, you must have an S3 Access Grants instance in the same Region as the S3 data. You can create an S3 Access Grants instance using the CreateAccessGrantsInstance. You must also have registered at least one S3 data location in your S3 Access Grants instance using CreateAccessGrantsLocation. Permissions You must have the s3:CreateAccessGrant permission to use this operation. Additional Permissions For any directory identity - sso:DescribeInstance and sso:DescribeApplication For directory users - identitystore:DescribeUser For directory groups - identitystore:DescribeGroup
operationId: amazonWebServicesCreateAccessGrant
tags:
- Accessgrantsinstance
/v20180820/accessgrantsinstance:
GET:
summary: Amazon Web Services Getaccessgrantsinstance
description: Retrieves the S3 Access Grants instance for a Region in your account. Permissions You must have the s3:GetAccessGrantsInstance permission to use this operation.
operationId: amazonWebServicesGetAccessGrantsInstance
tags:
- Accessgrantsinstance
/v20180820/accessgrantsinstance/location:
POST:
summary: Amazon Web Services Createaccessgrantslocation
description: 'The S3 data location that you would like to register in your S3 Access Grants instance. Your S3 data must be in the same Region as your S3 Access Grants instance. The location can be one of the following: The default S3 location s3:// A bucket - S3://<bucket-name> A bucket and prefix - S3://<bucket-name>/<prefix> When you register a location, you must include the IAM role that has permission to manage the S3 location that you are registering. Give S3 Access Grants permission to assume this role using a policy. S3 Access Grants assumes this role to manage access to the location and to vend temporary credentials to grantees or client applications. Permissions You must have the s3:CreateAccessGrantsLocation permission to use this operation. Additional Permissions You must also have the following permission for the specified IAM role: iam:PassRole'
operationId: amazonWebServicesCreateAccessGrantsLocation
tags:
- Accessgrantsinstance
/v20180820/accessgrantsinstance/grant/{id}:
GET:
summary: Amazon Web Services Getaccessgrant
description: Get the details of an access grant from your S3 Access Grants instance. Permissions You must have the s3:GetAccessGrant permission to use this operation.
operationId: amazonWebServicesGetAccessGrant
tags:
- Accessgrantsinstance
/v20180820/accessgrantsinstance/resourcepolicy:
PUT:
summary: Amazon Web Services Putaccessgrantsinstanceresourcepolicy
description: Updates the resource policy of the S3 Access Grants instance. Permissions You must have the s3:PutAccessGrantsInstanceResourcePolicy permission to use this operation.
operationId: amazonWebServicesPutAccessGrantsInstanceResourcePolicy
tags:
- Accessgrantsinstance
/v20180820/accessgrantsinstance/location/{id}:
PUT:
summary: Amazon Web Services Updateaccessgrantslocation
description: 'Updates the IAM role of a registered location in your S3 Access Grants instance. Permissions You must have the s3:UpdateAccessGrantsLocation permission to use this operation. Additional Permissions You must also have the following permission: iam:PassRole'
operationId: amazonWebServicesUpdateAccessGrantsLocation
tags:
- Accessgrantsinstance
/v20180820/accessgrantsinstance/prefix:
GET:
summary: Amazon Web Services Getaccessgrantsinstanceforprefix
description: 'Retrieve the S3 Access Grants instance that contains a particular prefix. Permissions You must have the s3:GetAccessGrantsInstanceForPrefix permission for the caller account to use this operation. Additional Permissions The prefix owner account must grant you the following permissions to their S3 Access Grants instance: s3:GetAccessGrantsInstanceForPrefix.'
operationId: amazonWebServicesGetAccessGrantsInstanceForPrefix
tags:
- Accessgrantsinstance
/v20180820/accessgrantsinstance/dataaccess:
GET:
summary: Amazon Web Services Getdataaccess
description: 'Returns a temporary access credential from S3 Access Grants to the grantee or client application. The temporary credential is an Amazon Web Services STS token that grants them access to the S3 data. Permissions You must have the s3:GetDataAccess permission to use this operation. Additional Permissions The IAM role that S3 Access Grants assumes must have the following permissions specified in the trust policy when registering the location: sts:AssumeRole, for directory users or groups sts:SetContext, and for IAM users or roles sts:SourceIdentity.'
operationId: amazonWebServicesGetDataAccess
tags:
- Accessgrantsinstance
/v20180820/accessgrantsinstance/grants:
GET:
summary: Amazon Web Services Listaccessgrants
description: Returns the list of access grants in your S3 Access Grants instance. Permissions You must have the s3:ListAccessGrants permission to use this operation.
operationId: amazonWebServicesListAccessGrants
tags:
- Accessgrantsinstance
/v20180820/accessgrantsinstance/locations:
GET:
summary: Amazon Web Services Listaccessgrantslocations
description: Returns a list of the locations registered in your S3 Access Grants instance. Permissions You must have the s3:ListAccessGrantsLocations permission to use this operation.
operationId: amazonWebServicesListAccessGrantsLocations
tags:
- Accessgrantsinstance