AWS Security Hub Members API
The Members API from AWS Security Hub — 4 operation(s) for members.
The Members API from AWS Security Hub — 4 operation(s) for members.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/aws-security-hub:aws-security-hub-members-api"
curl "https://apis.io/api/v1/apis?limit=25"
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Aws Security Hub Members API
version: '2018-10-26'
description: 'Operations tagged Members across 2 of this provider''s published API definitions: aws-security-hub-openapi.yml, aws-security-hub-members-api-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://securityhub.{region}.amazonaws.com
description: AWS Security Hub regional endpoint
variables:
region:
default: us-east-1
tags:
- name: Members
paths:
/members:
post:
tags:
- Members
operationId: CreateMembers
summary: Create member accounts
requestBody:
$ref: '#/components/requestBodies/JsonBody'
responses:
'200':
$ref: '#/components/responses/OK'
security:
- SigV4: []
get:
tags:
- Members
operationId: ListMembers
summary: List member accounts
responses:
'200':
$ref: '#/components/responses/OK'
security:
- SigV4: []
servers:
- url: https://securityhub.{region}.amazonaws.com
description: AWS Security Hub regional endpoint
variables:
region:
default: us-east-1
/members/delete:
post:
tags:
- Members
operationId: DeleteMembers
summary: Delete member accounts
requestBody:
$ref: '#/components/requestBodies/JsonBody'
responses:
'200':
$ref: '#/components/responses/OK'
security:
- SigV4: []
servers:
- url: https://securityhub.{region}.amazonaws.com
description: AWS Security Hub regional endpoint
variables:
region:
default: us-east-1
/members/disassociate:
post:
tags:
- Members
operationId: DisassociateMembers
summary: Disassociate member accounts
requestBody:
$ref: '#/components/requestBodies/JsonBody'
responses:
'200':
$ref: '#/components/responses/OK'
security:
- SigV4: []
servers:
- url: https://securityhub.{region}.amazonaws.com
description: AWS Security Hub regional endpoint
variables:
region:
default: us-east-1
/members/invite:
post:
tags:
- Members
operationId: InviteMembers
summary: Invite members
requestBody:
$ref: '#/components/requestBodies/JsonBody'
responses:
'200':
$ref: '#/components/responses/OK'
security:
- SigV4: []
servers:
- url: https://securityhub.{region}.amazonaws.com
description: AWS Security Hub regional endpoint
variables:
region:
default: us-east-1
/members/get:
post:
operationId: GetMembers
summary: Get Members
description: Returns the details for the Security Hub CSPM member accounts for the specified account IDs. An administrator account can be either the delegated Security Hub CSPM administrator account for an organization or an administrator account that enabled Security Hub CSPM manually. The results include both member accounts that are managed using Organizations and accounts that were invited manually.
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/GetMembersResponse'
'500':
description: InternalException
content:
application/json:
schema:
$ref: '#/components/schemas/InternalException'
'401':
description: InvalidAccessException
content:
application/json:
schema:
$ref: '#/components/schemas/InvalidAccessException'
'400':
description: InvalidInputException
content:
application/json:
schema:
$ref: '#/components/schemas/InvalidInputException'
'429':
description: LimitExceededException
content:
application/json:
schema:
$ref: '#/components/schemas/LimitExceededException'
'404':
description: ResourceNotFoundException
content:
application/json:
schema:
$ref: '#/components/schemas/ResourceNotFoundException'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/GetMembersRequest'
tags:
- Members
security:
- sigv4: []
servers:
- url: https://securityhub.{region}.amazonaws.com
variables:
region:
default: us-east-1
components:
responses:
OK:
description: Successful response
content:
application/json:
schema:
type: object
additionalProperties: true
requestBodies:
JsonBody:
required: true
content:
application/json:
schema:
type: object
additionalProperties: true
schemas:
InvalidInputException:
type: object
properties:
Message:
type: string
Code:
type: string
GetMembersResponse:
type: object
properties:
Members:
type: array
items:
$ref: '#/components/schemas/Member'
description: The list of details about the Security Hub CSPM member accounts.
UnprocessedAccounts:
type: array
items:
$ref: '#/components/schemas/Result'
description: The list of Amazon Web Services accounts that could not be processed. For each account, the list includes the account ID and the email address.
ResourceNotFoundException:
type: object
properties:
Message:
type: string
Code:
type: string
Result:
type: object
properties:
AccountId:
type: string
description: An Amazon Web Services account ID of the account that was not processed.
ProcessingResult:
type: string
description: The reason that the account was not processed.
GetMembersRequest:
type: object
properties:
AccountIds:
type: array
items:
type: string
description: The list of account IDs for the Security Hub CSPM member accounts to return the details for.
required:
- AccountIds
InternalException:
type: object
properties:
Message:
type: string
Code:
type: string
LimitExceededException:
type: object
properties:
Message:
type: string
Code:
type: string
Member:
type: object
properties:
AccountId:
type: string
description: The Amazon Web Services account ID of the member account.
Email:
type: string
description: The email address of the member account.
MasterId:
type: string
description: This is replaced by AdministratorID. The Amazon Web Services account ID of the Security Hub CSPM administrator account associated with this member account.
AdministratorId:
type: string
description: The Amazon Web Services account ID of the Security Hub CSPM administrator account associated with this member account.
MemberStatus:
type: string
description: 'The status of the relationship between the member account and its administrator account. The status can have one of the following values: Created - Indicates that the administrator account added the member account, but has not yet invited the member account. Invited - Indicates that the administrator account invited the member account. The member account has not yet responded to the invitation. Enabled - Indicates that the member account is currently active. For manually invited member accounts, indicates that the member account accepted the invitation. Removed - Indicates that the administrat'
InvitedAt:
type: string
format: date-time
description: A timestamp for the date and time when the invitation was sent to the member account.
UpdatedAt:
type: string
format: date-time
description: The timestamp for the date and time when the member account was updated.
InvalidAccessException:
type: object
properties:
Message:
type: string
Code:
type: string
securitySchemes:
SigV4:
type: apiKey
in: header
name: Authorization
description: AWS Signature Version 4 signed Authorization header
sigv4:
type: apiKey
in: header
name: Authorization
description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
x-aws-sigv4:
signingName: securityhub
x-refined-from:
- aws-security-hub-openapi.yml
- aws-security-hub-members-api-openapi.yml