Lightdash AWS Web Identity API

openapi: 3.2.0
info:
  title: Lightdash AWS Web Identity API
  version: 2.616.2
  description: 'Open API documentation for all public Lightdash API endpoints. # Authentication Before you get started, you might need to create a Personal Access Token to authenticate via the API. You can create a token by following this guide: https://docs.lightdash.com/references/personal_tokens'
  license:
    name: MIT
  contact:
    name: Lightdash Support
    email: support@lightdash.com
    url: https://docs.lightdash.com/help-and-contact/contact/contact_info/
servers:
- url: /
tags:
- name: AWS Web Identity
paths:
  /api/v1/aws/web-identity:
    get:
      operationId: getAwsWebIdentity
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiAwsWebIdentityResponse'
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorPayload'
      description: 'Get this instance''s identity for Athena web identity authentication.

        Add the subject to the IAM role''s trust policy.'
      summary: Get web identity subject
      tags:
      - AWS Web Identity
      security: []
      parameters: []
  /api/v1/aws/web-identity/audiences:
    post:
      operationId: createAwsWebIdentityAudience
      responses:
        '201':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiAwsWebIdentityAudienceResponse'
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorPayload'
      description: 'Generate an audience for Athena web identity authentication. Add it to

        the IAM role''s trust policy as accounts.google.com:oaud.'
      summary: Generate web identity audience
      tags:
      - AWS Web Identity
      security: []
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateAwsWebIdentityAudience'
components:
  schemas:
    CreateAwsWebIdentityAudience:
      properties:
        projectUuid:
          allOf:
          - $ref: '#/components/schemas/UUID'
          description: The project whose connection uses the audience. Null for a new project.
      required:
      - projectUuid
      type: object
    ApiAwsWebIdentityAudienceResponse:
      properties:
        results:
          $ref: '#/components/schemas/AwsWebIdentityAudience'
        status:
          type: string
          enum:
          - ok
      required:
      - results
      - status
      type: object
    AwsWebIdentityAudience:
      allOf:
      - $ref: '#/components/schemas/AwsWebIdentity'
      - properties:
          audience:
            type: string
            description: Pinned as accounts.google.com:oaud in the role's trust policy.
        required:
        - audience
        type: object
    AnyType:
      description: 'This AnyType is an alias for any

        The goal is to make it easier to identify any type in the codebase

        without having to eslint-disable all the time

        These are only used on legacy `any` types, don''t use it for new types.

        This is added on a separate file to avoid circular dependencies.'
    ApiAwsWebIdentityResponse:
      properties:
        results:
          $ref: '#/components/schemas/AwsWebIdentity'
        status:
          type: string
          enum:
          - ok
      required:
      - results
      - status
      type: object
    UUID:
      type: string
      format: uuid
      description: 'Stringified UUIDv4.

        See [RFC 4112](https://tools.ietf.org/html/rfc4122)'
      pattern: '[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-4[0-9A-Fa-f]{3}-[89ABab][0-9A-Fa-f]{3}-[0-9A-Fa-f]{12}'
    ApiErrorPayload:
      properties:
        error:
          properties:
            data:
              $ref: '#/components/schemas/AnyType'
              description: Optional data containing details of the error
            message:
              type: string
              description: A friendly message summarising the error
            name:
              type: string
              description: Unique name for the type of error
            statusCode:
              type: number
              format: integer
              description: HTTP status code
          required:
          - name
          - statusCode
          type: object
        status:
          type: string
          enum:
          - error
      required:
      - error
      - status
      type: object
      description: 'The Error object is returned from the api any time there is an error.

        The message contains'
    AwsWebIdentity:
      properties:
        subject:
          type:
          - string
          - 'null'
          description: 'This instance''s Google subject, pinned as accounts.google.com:sub and

            accounts.google.com:aud. Null when the instance can''t read it.'
      required:
      - subject
      type: object
  securitySchemes:
    session_cookie:
      type: apiKey
      in: cookie
      name: connect.sid
    api_key:
      type: apiKey
      in: header
      name: Authorization
      description: Value should be 'ApiKey <your key>'
x-provenance:
  method: harvested
  publisher: Lightdash
  source: https://raw.githubusercontent.com/lightdash/lightdash/refs/heads/main/packages/backend/src/generated/swagger.json
  note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
    stamped by stamp-openapi-provenance.py (roadmap#793)