Amazon Web Services Policy API

The Policy API from Amazon Web Services — 9 operation(s) for policy.

Business capability
Identity & Access Management BC-620.20

Operations 9

GET /policy/generation/{jobId} Amazon Web Services Getgeneratedpolicy #
POST /policy/check-access-not-granted Amazon Web Services Checkaccessnotgranted #
POST /policy/check-no-new-access Amazon Web Services Checknonewaccess #
PUT /policy/generation Amazon Web Services Startpolicygeneration #
POST /policy/validation Amazon Web Services Validatepolicy #
PUT /policy/{resourceArn}/ Amazon Web Services Updateresourcepolicy #
POST /policy/{resourceArn}/statements/ Amazon Web Services Createresourcepolicystatement #
DELETE /policy/{resourceArn}/statements/{statementId}/ Amazon Web Services Deleteresourcepolicystatement #
PUT /v1/policy Amazon Web Services Putresourcepolicy #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/amazon-web-services-policy-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

amazon-web-services-policy-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Amazon Web Services Policy API
  version: '1.0'
  description: 'Operations tagged Policy across 3 of this provider''s published API definitions: accessanalyzer-openapi-original.yml, modelslexv2-openapi-original.yml, schemas-openapi-original.yml. Each path carries the servers of the definition it was published in.'
tags:
- name: Policy
paths:
  /policy/generation/{jobId}:
    GET:
      summary: Amazon Web Services Getgeneratedpolicy
      description: Retrieves the policy that was generated using StartPolicyGeneration.
      operationId: amazonWebServicesGetGeneratedPolicy
      tags:
      - Policy
  /policy/check-access-not-granted:
    POST:
      summary: Amazon Web Services Checkaccessnotgranted
      description: Checks whether the specified access isn't allowed by a policy.
      operationId: amazonWebServicesCheckAccessNotGranted
      tags:
      - Policy
  /policy/check-no-new-access:
    POST:
      summary: Amazon Web Services Checknonewaccess
      description: Checks whether new access is allowed for an updated policy when compared to the existing policy. You can find examples for reference policies and learn how to set up and run a custom policy check for new access in the IAM Access Analyzer custom policy checks samples repository on GitHub. The reference policies in this repository are meant to be passed to the existingPolicyDocument request parameter.
      operationId: amazonWebServicesCheckNoNewAccess
      tags:
      - Policy
  /policy/generation:
    PUT:
      summary: Amazon Web Services Startpolicygeneration
      description: Starts the policy generation request.
      operationId: amazonWebServicesStartPolicyGeneration
      tags:
      - Policy
  /policy/validation:
    POST:
      summary: Amazon Web Services Validatepolicy
      description: Requests the validation of a policy and returns a list of findings. The findings help you identify issues and provide actionable recommendations to resolve the issue and enable you to author functional policies that meet security best practices.
      operationId: amazonWebServicesValidatePolicy
      tags:
      - Policy
  /policy/{resourceArn}/:
    PUT:
      summary: Amazon Web Services Updateresourcepolicy
      description: Replaces the existing resource policy for a bot or bot alias with a new one. If the policy doesn't exist, Amazon Lex returns an exception.
      operationId: amazonWebServicesUpdateResourcePolicy
      tags:
      - Policy
  /policy/{resourceArn}/statements/:
    POST:
      summary: Amazon Web Services Createresourcepolicystatement
      description: Adds a new resource policy statement to a bot or bot alias. If a resource policy exists, the statement is added to the current resource policy. If a policy doesn't exist, a new policy is created. You can't create a resource policy statement that allows cross-account access.
      operationId: amazonWebServicesCreateResourcePolicyStatement
      tags:
      - Policy
  /policy/{resourceArn}/statements/{statementId}/:
    DELETE:
      summary: Amazon Web Services Deleteresourcepolicystatement
      description: Deletes a policy statement from a resource policy. If you delete the last statement from a policy, the policy is deleted. If you specify a statement ID that doesn't exist in the policy, or if the bot or bot alias doesn't have a policy attached, Amazon Lex returns an exception.
      operationId: amazonWebServicesDeleteResourcePolicyStatement
      tags:
      - Policy
  /v1/policy:
    PUT:
      summary: Amazon Web Services Putresourcepolicy
      description: The name of the policy.
      operationId: amazonWebServicesPutResourcePolicy
      tags:
      - Policy
x-refined-from:
- accessanalyzer-openapi-original.yml
- modelslexv2-openapi-original.yml
- schemas-openapi-original.yml