AWS Security Hub Members API

The Members API from AWS Security Hub — 4 operation(s) for members.

Operations 6

POST /members Create member accounts #
GET /members List member accounts #
POST /members/delete Delete member accounts #
POST /members/disassociate Disassociate member accounts #
POST /members/invite Invite members #
POST /members/get Get Members #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/aws-security-hub:aws-security-hub-members-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

aws-security-hub-members-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Aws Security Hub Members API
  version: '2018-10-26'
  description: 'Operations tagged Members across 2 of this provider''s published API definitions: aws-security-hub-openapi.yml, aws-security-hub-members-api-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://securityhub.{region}.amazonaws.com
  description: AWS Security Hub regional endpoint
  variables:
    region:
      default: us-east-1
tags:
- name: Members
paths:
  /members:
    post:
      tags:
      - Members
      operationId: CreateMembers
      summary: Create member accounts
      requestBody:
        $ref: '#/components/requestBodies/JsonBody'
      responses:
        '200':
          $ref: '#/components/responses/OK'
      security:
      - SigV4: []
    get:
      tags:
      - Members
      operationId: ListMembers
      summary: List member accounts
      responses:
        '200':
          $ref: '#/components/responses/OK'
      security:
      - SigV4: []
    servers:
    - url: https://securityhub.{region}.amazonaws.com
      description: AWS Security Hub regional endpoint
      variables:
        region:
          default: us-east-1
  /members/delete:
    post:
      tags:
      - Members
      operationId: DeleteMembers
      summary: Delete member accounts
      requestBody:
        $ref: '#/components/requestBodies/JsonBody'
      responses:
        '200':
          $ref: '#/components/responses/OK'
      security:
      - SigV4: []
    servers:
    - url: https://securityhub.{region}.amazonaws.com
      description: AWS Security Hub regional endpoint
      variables:
        region:
          default: us-east-1
  /members/disassociate:
    post:
      tags:
      - Members
      operationId: DisassociateMembers
      summary: Disassociate member accounts
      requestBody:
        $ref: '#/components/requestBodies/JsonBody'
      responses:
        '200':
          $ref: '#/components/responses/OK'
      security:
      - SigV4: []
    servers:
    - url: https://securityhub.{region}.amazonaws.com
      description: AWS Security Hub regional endpoint
      variables:
        region:
          default: us-east-1
  /members/invite:
    post:
      tags:
      - Members
      operationId: InviteMembers
      summary: Invite members
      requestBody:
        $ref: '#/components/requestBodies/JsonBody'
      responses:
        '200':
          $ref: '#/components/responses/OK'
      security:
      - SigV4: []
    servers:
    - url: https://securityhub.{region}.amazonaws.com
      description: AWS Security Hub regional endpoint
      variables:
        region:
          default: us-east-1
  /members/get:
    post:
      operationId: GetMembers
      summary: Get Members
      description: Returns the details for the Security Hub CSPM member accounts for the specified account IDs. An administrator account can be either the delegated Security Hub CSPM administrator account for an organization or an administrator account that enabled Security Hub CSPM manually. The results include both member accounts that are managed using Organizations and accounts that were invited manually.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetMembersResponse'
        '500':
          description: InternalException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalException'
        '401':
          description: InvalidAccessException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InvalidAccessException'
        '400':
          description: InvalidInputException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InvalidInputException'
        '429':
          description: LimitExceededException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LimitExceededException'
        '404':
          description: ResourceNotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceNotFoundException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GetMembersRequest'
      tags:
      - Members
      security:
      - sigv4: []
    servers:
    - url: https://securityhub.{region}.amazonaws.com
      variables:
        region:
          default: us-east-1
components:
  responses:
    OK:
      description: Successful response
      content:
        application/json:
          schema:
            type: object
            additionalProperties: true
  requestBodies:
    JsonBody:
      required: true
      content:
        application/json:
          schema:
            type: object
            additionalProperties: true
  schemas:
    InvalidInputException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    GetMembersResponse:
      type: object
      properties:
        Members:
          type: array
          items:
            $ref: '#/components/schemas/Member'
          description: The list of details about the Security Hub CSPM member accounts.
        UnprocessedAccounts:
          type: array
          items:
            $ref: '#/components/schemas/Result'
          description: The list of Amazon Web Services accounts that could not be processed. For each account, the list includes the account ID and the email address.
    ResourceNotFoundException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    Result:
      type: object
      properties:
        AccountId:
          type: string
          description: An Amazon Web Services account ID of the account that was not processed.
        ProcessingResult:
          type: string
          description: The reason that the account was not processed.
    GetMembersRequest:
      type: object
      properties:
        AccountIds:
          type: array
          items:
            type: string
          description: The list of account IDs for the Security Hub CSPM member accounts to return the details for.
      required:
      - AccountIds
    InternalException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    LimitExceededException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    Member:
      type: object
      properties:
        AccountId:
          type: string
          description: The Amazon Web Services account ID of the member account.
        Email:
          type: string
          description: The email address of the member account.
        MasterId:
          type: string
          description: This is replaced by AdministratorID. The Amazon Web Services account ID of the Security Hub CSPM administrator account associated with this member account.
        AdministratorId:
          type: string
          description: The Amazon Web Services account ID of the Security Hub CSPM administrator account associated with this member account.
        MemberStatus:
          type: string
          description: 'The status of the relationship between the member account and its administrator account. The status can have one of the following values: Created - Indicates that the administrator account added the member account, but has not yet invited the member account. Invited - Indicates that the administrator account invited the member account. The member account has not yet responded to the invitation. Enabled - Indicates that the member account is currently active. For manually invited member accounts, indicates that the member account accepted the invitation. Removed - Indicates that the administrat'
        InvitedAt:
          type: string
          format: date-time
          description: A timestamp for the date and time when the invitation was sent to the member account.
        UpdatedAt:
          type: string
          format: date-time
          description: The timestamp for the date and time when the member account was updated.
    InvalidAccessException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
  securitySchemes:
    SigV4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4 signed Authorization header
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: securityhub
x-refined-from:
- aws-security-hub-openapi.yml
- aws-security-hub-members-api-openapi.yml