# AWS Identity and Access Management API

> AWS Identity and Access Management API on Apizie: 159 endpoints (Adds a new client ID (also known as audience) to the list of client IDs already registered for the specified…, Adds the specified IAM role to the specified instance profile. An instance profile can contain only one…, Adds the specified user to the specified group., Attaches the specified managed policy to the specified IAM group. You use this operation to attach a managed…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:amazonaws-iam/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-iam`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://apizie.tech/api/cloud/amazonaws-iam
- OpenAPI: https://apizie.tech/api/cloud/amazonaws-iam/openapi.json

Identity and Access Management Identity and Access Management (IAM) is a web service for securely controlling access to Amazon Web Services services. With IAM, you can centrally manage users, security credentials such…

## Endpoints

### Adds a new client ID (also known as audience) to the list of client IDs already registered for the specified…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-add-client-idto-open-idconnect-provider` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| OpenIDConnectProviderArn | string | yes | The Amazon Resource Name (ARN) of the IAM OpenID Connect (OIDC) provider resource to add the client ID to. You can get a list of OIDC… |
| ClientID | string | yes | The client ID (also known as audience) to add to the IAM OpenID Connect provider resource. |

### Adds the specified IAM role to the specified instance profile. An instance profile can contain only one…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-add-role-to-instance-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| InstanceProfileName | string | yes | The name of the instance profile to update. This parameter allows (through its regex pattern ) a string of characters consisting of upper… |
| RoleName | string | yes | The name of the role to add. This parameter allows (through its regex pattern ) a string of characters consisting of upper and lowercase… |

### Adds the specified user to the specified group.
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-add-user-to-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | yes | The name of the group to update. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |
| UserName | string | yes | The name of the user to add. This parameter allows (through its regex pattern ) a string of characters consisting of upper and lowercase… |

### Attaches the specified managed policy to the specified IAM group. You use this operation to attach a managed…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-attach-group-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | yes | The name (friendly name, not ARN) of the group to attach the policy to. This parameter allows (through its regex pattern ) a string of… |
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the IAM policy you want to attach. For more information about ARNs, see Amazon Resource Names (ARNs) in… |

### Attaches the specified managed policy to the specified IAM role. When you attach a managed policy to a role,…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-attach-role-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name (friendly name, not ARN) of the role to attach the policy to. This parameter allows (through its regex pattern ) a string of… |
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the IAM policy you want to attach. For more information about ARNs, see Amazon Resource Names (ARNs) in… |

### Attaches the specified managed policy to the specified user. You use this operation to attach a managed…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-attach-user-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name (friendly name, not ARN) of the IAM user to attach the policy to. This parameter allows (through its regex pattern ) a string of… |
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the IAM policy you want to attach. For more information about ARNs, see Amazon Resource Names (ARNs) in… |

### Changes the password of the IAM user who is calling this operation. This operation can be performed using…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-change-password` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| OldPassword | string | yes | The IAM user's current password. |
| NewPassword | string | yes | The new password. The new password must conform to the Amazon Web Services account's password policy, if one exists. The regex pattern… |

### Creates a new Amazon Web Services secret access key and corresponding Amazon Web Services access key ID for…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-access-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the IAM user that the new key will belong to. This parameter allows (through its regex pattern ) a string of characters… |

### Creates an alias for your Amazon Web Services account. For information about using an Amazon Web Services…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-account-alias` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AccountAlias | string | yes | The account alias to create. This parameter allows (through its regex pattern ) a string of characters consisting of lowercase letters,… |

### Creates a new group. For information about the number of groups you can create, see IAM and STS quotas in…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Path | string | no | The path to the group. For more information about paths, see IAM identifiers in the IAM User Guide . This parameter is optional. If it is… |
| GroupName | string | yes | The name of the group to create. Do not include the path in this value. IAM user, group, role, and policy names must be unique within the… |

### Creates a new instance profile. For information about instance profiles, see Using roles for applications on…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-instance-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| InstanceProfileName | string | yes | The name of the instance profile to create. This parameter allows (through its regex pattern ) a string of characters consisting of upper… |
| Path | string | no | The path to the instance profile. For more information about paths, see IAM Identifiers in the IAM User Guide . This parameter is… |
| Tags | array | no | A list of tags that you want to attach to the newly created IAM instance profile. Each tag consists of a key name and an associated value.… |

### Creates a password for the specified IAM user. A password allows an IAM user to access Amazon Web Services…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-login-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the IAM user to create a password for. The user must already exist. This parameter allows (through its regex pattern ) a… |
| Password | string | yes | The new password for the user. The regex pattern that is used to validate this parameter is a string of characters. That string can… |
| PasswordResetRequired | boolean | no | Specifies whether the user is required to set a new password on next sign-in. |

### Creates an IAM entity to describe an identity provider (IdP) that supports OpenID Connect (OIDC) . The OIDC…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-open-idconnect-provider` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Url | string | yes | The URL of the identity provider. The URL must begin with https:// and should correspond to the iss claim in the provider's OpenID Connect… |
| ClientIDList | array | no | Provides a list of client IDs, also known as audiences. When a mobile or web app registers with an OpenID Connect provider, they establish… |
| ThumbprintList | array | yes | A list of server certificate thumbprints for the OpenID Connect (OIDC) identity provider's server certificates. Typically this list… |
| Tags | array | no | A list of tags that you want to attach to the new IAM OpenID Connect (OIDC) provider. Each tag consists of a key name and an associated… |

### Creates a new managed policy for your Amazon Web Services account. This operation creates a policy version…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyName | string | yes | The friendly name of the policy. IAM user, group, role, and policy names must be unique within the account. Names are not distinguished by… |
| Path | string | no | The path for the policy. For more information about paths, see IAM identifiers in the IAM User Guide . This parameter is optional. If it… |
| PolicyDocument | string | yes | The JSON policy document that you want to use as the content for the new policy. You must provide policies in JSON format in IAM. However,… |
| Description | string | no | A friendly description of the policy. Typically used to store information about the permissions defined in the policy. For example,… |
| Tags | array | no | A list of tags that you want to attach to the new IAM customer managed policy. Each tag consists of a key name and an associated value.… |

### Creates a new version of the specified managed policy. To update a managed policy, you create a new policy…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-policy-version` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the IAM policy to which you want to add a new version. For more information about ARNs, see Amazon… |
| PolicyDocument | string | yes | The JSON policy document that you want to use as the content for this new version of the policy. You must provide policies in JSON format… |
| SetAsDefault | boolean | no | Specifies whether to set this version as the policy's default version. When this parameter is true , the new policy version becomes the… |

### Creates a new role for your Amazon Web Services account. For more information about roles, see IAM roles in…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Path | string | no | The path to the role. For more information about paths, see IAM Identifiers in the IAM User Guide . This parameter is optional. If it is… |
| RoleName | string | yes | The name of the role to create. IAM user, group, role, and policy names must be unique within the account. Names are not distinguished by… |
| AssumeRolePolicyDocument | string | yes | The trust relationship policy document that grants an entity permission to assume the role. In IAM, you must provide a JSON policy that… |
| Description | string | no | A description of the role. |
| MaxSessionDuration | integer | no | The maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the… |
| PermissionsBoundary | string | no | The ARN of the managed policy that is used to set the permissions boundary for the role. A permissions boundary policy defines the maximum… |
| Tags | array | no | A list of tags that you want to attach to the new role. Each tag consists of a key name and an associated value. For more information… |

### Creates an IAM resource that describes an identity provider (IdP) that supports SAML 2.0. The SAML provider…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-samlprovider` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SAMLMetadataDocument | string | yes | An XML document generated by an identity provider (IdP) that supports SAML 2.0. The document includes the issuer's name, expiration… |
| Name | string | yes | The name of the provider to create. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |
| Tags | array | no | A list of tags that you want to attach to the new IAM SAML provider. Each tag consists of a key name and an associated value. For more… |

### Creates an IAM role that is linked to a specific Amazon Web Services service. The service controls the…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-service-linked-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AWSServiceName | string | yes | The service principal for the Amazon Web Services service to which this role is attached. You use a string similar to a URL but without… |
| Description | string | no | The description of the role. |
| CustomSuffix | string | no | A string that you provide, which is combined with the service-provided prefix to form the complete role name. If you make multiple… |

### Generates a set of credentials consisting of a user name and password that can be used to access the service…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-service-specific-credential` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the IAM user that is to be associated with the credentials. The new service-specific credentials have the same permissions as… |
| ServiceName | string | yes | The name of the Amazon Web Services service that is to be associated with the credentials. The service you specify here is the only… |

### Creates a new IAM user for your Amazon Web Services account. For information about quotas for the number of…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Path | string | no | The path for the user name. For more information about paths, see IAM identifiers in the IAM User Guide . This parameter is optional. If… |
| UserName | string | yes | The name of the user to create. IAM user, group, role, and policy names must be unique within the account. Names are not distinguished by… |
| PermissionsBoundary | string | no | The ARN of the managed policy that is used to set the permissions boundary for the user. A permissions boundary policy defines the maximum… |
| Tags | array | no | A list of tags that you want to attach to the new user. Each tag consists of a key name and an associated value. For more information… |

### Creates a new virtual MFA device for the Amazon Web Services account. After creating the virtual MFA, use…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-create-virtual-mfadevice` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Path | string | no | The path for the virtual MFA device. For more information about paths, see IAM identifiers in the IAM User Guide . This parameter is… |
| VirtualMFADeviceName | string | yes | The name of the virtual MFA device, which must be unique. Use with path to uniquely identify a virtual MFA device. This parameter allows… |
| Tags | array | no | A list of tags that you want to attach to the new IAM virtual MFA device. Each tag consists of a key name and an associated value. For… |

### Deactivates the specified MFA device and removes it from association with the user name for which it was…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-deactivate-mfadevice` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the user whose MFA device you want to deactivate. This parameter allows (through its regex pattern ) a string of characters… |
| SerialNumber | string | yes | The serial number that uniquely identifies the MFA device. For virtual MFA devices, the serial number is the device ARN. This parameter… |

### Deletes the access key pair associated with the specified IAM user. If you do not specify a user name, IAM…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-access-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the user whose access key pair you want to delete. This parameter allows (through its regex pattern ) a string of characters… |
| AccessKeyId | string | yes | The access key ID for the access key ID and secret access key you want to delete. This parameter allows (through its regex pattern ) a… |

### Deletes the specified Amazon Web Services account alias. For information about using an Amazon Web Services…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-account-alias` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AccountAlias | string | yes | The name of the account alias to delete. This parameter allows (through its regex pattern ) a string of characters consisting of lowercase… |

### Deletes the password policy for the Amazon Web Services account. There are no parameters.
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-account-password-policy` (byok)

### Deletes the specified IAM group. The group must not contain any users or have any attached policies.
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | yes | The name of the IAM group to delete. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |

### Deletes the specified inline policy that is embedded in the specified IAM group. A group can also have…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-group-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | yes | The name (friendly name, not ARN) identifying the group that the policy is embedded in. This parameter allows (through its regex pattern )… |
| PolicyName | string | yes | The name identifying the policy document to delete. This parameter allows (through its regex pattern ) a string of characters consisting… |

### Deletes the specified instance profile. The instance profile must not have an associated role. Make sure…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-instance-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| InstanceProfileName | string | yes | The name of the instance profile to delete. This parameter allows (through its regex pattern ) a string of characters consisting of upper… |

### Deletes the password for the specified IAM user, For more information, see Managing passwords for IAM users…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-login-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the user whose password you want to delete. This parameter allows (through its regex pattern ) a string of characters… |

### Deletes an OpenID Connect identity provider (IdP) resource object in IAM. Deleting an IAM OIDC provider…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-open-idconnect-provider` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| OpenIDConnectProviderArn | string | yes | The Amazon Resource Name (ARN) of the IAM OpenID Connect provider resource object to delete. You can get a list of OpenID Connect provider… |

### Deletes the specified managed policy. Before you can delete a managed policy, you must first detach the…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the IAM policy you want to delete. For more information about ARNs, see Amazon Resource Names (ARNs) in… |

### Deletes the specified version from the specified managed policy. You cannot delete the default version from…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-policy-version` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the IAM policy from which you want to delete a version. For more information about ARNs, see Amazon… |
| VersionId | string | yes | The policy version to delete. This parameter allows (through its regex pattern ) a string of characters that consists of the lowercase… |

### Deletes the specified role. Unlike the Amazon Web Services Management Console, when you delete a role…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name of the role to delete. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |

### Deletes the permissions boundary for the specified IAM role. You cannot set the boundary for a…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-role-permissions-boundary` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name (friendly name, not ARN) of the IAM role from which you want to remove the permissions boundary. |

### Deletes the specified inline policy that is embedded in the specified IAM role. A role can also have managed…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-role-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name (friendly name, not ARN) identifying the role that the policy is embedded in. This parameter allows (through its regex pattern )… |
| PolicyName | string | yes | The name of the inline policy to delete from the specified IAM role. This parameter allows (through its regex pattern ) a string of… |

### Deletes a SAML provider resource in IAM. Deleting the provider resource from IAM does not update any roles…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-samlprovider` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SAMLProviderArn | string | yes | The Amazon Resource Name (ARN) of the SAML provider to delete. |

### Deletes the specified SSH public key. The SSH public key deleted by this operation is used only for…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-sshpublic-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the IAM user associated with the SSH public key. This parameter allows (through its regex pattern ) a string of characters… |
| SSHPublicKeyId | string | yes | The unique identifier for the SSH public key. This parameter allows (through its regex pattern ) a string of characters that can consist… |

### Deletes the specified server certificate. For more information about working with server certificates, see…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-server-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ServerCertificateName | string | yes | The name of the server certificate you want to delete. This parameter allows (through its regex pattern ) a string of characters… |

### Submits a service-linked role deletion request and returns a DeletionTaskId , which you can use to check the…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-service-linked-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name of the service-linked role to be deleted. |

### Deletes the specified service-specific credential.
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-service-specific-credential` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the IAM user associated with the service-specific credential. If this value is not specified, then the operation assumes the… |
| ServiceSpecificCredentialId | string | yes | The unique identifier of the service-specific credential. You can get this value by calling ListServiceSpecificCredentials . This… |

### Deletes a signing certificate associated with the specified IAM user. If you do not specify a user name, IAM…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-signing-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the user the signing certificate belongs to. This parameter allows (through its regex pattern ) a string of characters… |
| CertificateId | string | yes | The ID of the signing certificate to delete. The format of this parameter, as described by its regex pattern, is a string of characters… |

### Deletes the specified IAM user. Unlike the Amazon Web Services Management Console, when you delete a user…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the user to delete. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |

### Deletes the permissions boundary for the specified IAM user. Deleting the permissions boundary for a user…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-user-permissions-boundary` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name (friendly name, not ARN) of the IAM user from which you want to remove the permissions boundary. |

### Deletes the specified inline policy that is embedded in the specified IAM user. A user can also have managed…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-user-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name (friendly name, not ARN) identifying the user that the policy is embedded in. This parameter allows (through its regex pattern )… |
| PolicyName | string | yes | The name identifying the policy document to delete. This parameter allows (through its regex pattern ) a string of characters consisting… |

### Deletes a virtual MFA device. You must deactivate a user's virtual MFA device before you can delete it. For…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-delete-virtual-mfadevice` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SerialNumber | string | yes | The serial number that uniquely identifies the MFA device. For virtual MFA devices, the serial number is the same as the ARN. This… |

### Removes the specified managed policy from the specified IAM group. A group can also have inline policies…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-detach-group-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | yes | The name (friendly name, not ARN) of the IAM group to detach the policy from. This parameter allows (through its regex pattern ) a string… |
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the IAM policy you want to detach. For more information about ARNs, see Amazon Resource Names (ARNs) in… |

### Removes the specified managed policy from the specified role. A role can also have inline policies embedded…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-detach-role-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name (friendly name, not ARN) of the IAM role to detach the policy from. This parameter allows (through its regex pattern ) a string… |
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the IAM policy you want to detach. For more information about ARNs, see Amazon Resource Names (ARNs) in… |

### Removes the specified managed policy from the specified user. A user can also have inline policies embedded…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-detach-user-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name (friendly name, not ARN) of the IAM user to detach the policy from. This parameter allows (through its regex pattern ) a string… |
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the IAM policy you want to detach. For more information about ARNs, see Amazon Resource Names (ARNs) in… |

### Enables the specified MFA device and associates it with the specified IAM user. When enabled, the MFA device…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-enable-mfadevice` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the IAM user for whom you want to enable the MFA device. This parameter allows (through its regex pattern ) a string of… |
| SerialNumber | string | yes | The serial number that uniquely identifies the MFA device. For virtual MFA devices, the serial number is the device ARN. This parameter… |
| AuthenticationCode1 | string | yes | An authentication code emitted by the device. The format for this parameter is a string of six digits. Submit your request immediately… |
| AuthenticationCode2 | string | yes | A subsequent authentication code emitted by the device. The format for this parameter is a string of six digits. Submit your request… |

### Generates a credential report for the Amazon Web Services account. For more information about the credential…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-generate-credential-report` (byok)

### Generates a report for service last accessed data for Organizations. You can generate a report for any…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-generate-organizations-access-report` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| EntityPath | string | yes | The path of the Organizations entity (root, OU, or account). You can build an entity path using the known structure of your organization.… |
| OrganizationsPolicyId | string | no | The identifier of the Organizations service control policy (SCP). This parameter is optional. This ID is used to generate information… |

### Generates a report that includes details about when an IAM resource (user, group, role, or policy) was last…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-generate-service-last-accessed-details` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Arn | string | yes | The ARN of the IAM resource (user, group, role, or managed policy) used to generate information about when the resource was last used in… |
| Granularity | string | no | The level of detail that you want to generate. You can specify whether you want to generate information about the last attempt to access… |

### Retrieves information about when the specified access key was last used. The information includes the date…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-access-key-last-used` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AccessKeyId | string | yes | The identifier of an access key. This parameter allows (through its regex pattern ) a string of characters that can consist of any upper… |

### Retrieves information about all IAM users, groups, roles, and policies in your Amazon Web Services account,…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-account-authorization-details` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Filter | array | no | A list of entity types used to filter the results. Only the entities that match the types you specify are included in the output. Use the… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |

### Retrieves the password policy for the Amazon Web Services account. This tells you the complexity…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-account-password-policy` (byok)

### Retrieves information about IAM entity usage and IAM quotas in the Amazon Web Services account. For…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-account-summary` (byok)

### Gets a list of all of the context keys referenced in the input policies. The policies are supplied as a list…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-context-keys-for-custom-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyInputList | array | yes | A list of policies for which you want the list of context keys referenced in those policies. Each document is specified as a string… |

### Gets a list of all of the context keys referenced in all the IAM policies that are attached to the specified…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-context-keys-for-principal-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicySourceArn | string | yes | The ARN of a user, group, or role whose policies contain the context keys that you want listed. If you specify a user, the list includes… |
| PolicyInputList | array | no | An optional list of additional policies for which you want the list of context keys that are referenced. The regex pattern used to… |

### Retrieves a credential report for the Amazon Web Services account. For more information about the credential…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-credential-report` (byok)

### Returns a list of IAM users that are in the specified IAM group. You can paginate the results using the…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | yes | The name of the group. This parameter allows (through its regex pattern ) a string of characters consisting of upper and lowercase… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Retrieves the specified inline policy document that is embedded in the specified IAM group. Policies…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-group-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | yes | The name of the group the policy is associated with. This parameter allows (through its regex pattern ) a string of characters consisting… |
| PolicyName | string | yes | The name of the policy document to get. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |

### Retrieves information about the specified instance profile, including the instance profile's path, GUID,…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-instance-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| InstanceProfileName | string | yes | The name of the instance profile to get information about. This parameter allows (through its regex pattern ) a string of characters… |

### Retrieves the user name for the specified IAM user. A login profile is created when you create a password…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-login-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the user whose login profile you want to retrieve. This parameter allows (through its regex pattern ) a string of characters… |

### Retrieves information about an MFA device for a specified user.
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-mfadevice` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SerialNumber | string | yes | Serial number that uniquely identifies the MFA device. For this API, we only accept FIDO security key ARNs . |
| UserName | string | no | The friendly name identifying the user. |

### Returns information about the specified OpenID Connect (OIDC) provider resource object in IAM.
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-open-idconnect-provider` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| OpenIDConnectProviderArn | string | yes | The Amazon Resource Name (ARN) of the OIDC provider resource object in IAM to get information for. You can get a list of OIDC provider… |

### Retrieves the service last accessed data report for Organizations that was previously generated using the…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-organizations-access-report` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| JobId | string | yes | The identifier of the request generated by the GenerateOrganizationsAccessReport operation. |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| SortKey | string | no | The key that is used to sort the results. If you choose the namespace key, the results are returned in alphabetical order. If you choose… |

### Retrieves information about the specified managed policy, including the policy's default version and the…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the managed policy that you want information about. For more information about ARNs, see Amazon Resource… |

### Retrieves information about the specified version of the specified managed policy, including the policy…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-policy-version` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the managed policy that you want information about. For more information about ARNs, see Amazon Resource… |
| VersionId | string | yes | Identifies the policy version to retrieve. This parameter allows (through its regex pattern ) a string of characters that consists of the… |

### Retrieves information about the specified role, including the role's path, GUID, ARN, and the role's trust…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name of the IAM role to get information about. This parameter allows (through its regex pattern ) a string of characters consisting of… |

### Retrieves the specified inline policy document that is embedded with the specified IAM role. Policies…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-role-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name of the role associated with the policy. This parameter allows (through its regex pattern ) a string of characters consisting of… |
| PolicyName | string | yes | The name of the policy document to get. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |

### Returns the SAML provider metadocument that was uploaded when the IAM SAML provider resource object was…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-samlprovider` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SAMLProviderArn | string | yes | The Amazon Resource Name (ARN) of the SAML provider resource object in IAM to get information about. For more information about ARNs, see… |

### Retrieves the specified SSH public key, including metadata about the key. The SSH public key retrieved by…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-sshpublic-key` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the IAM user associated with the SSH public key. This parameter allows (through its regex pattern ) a string of characters… |
| SSHPublicKeyId | string | yes | The unique identifier for the SSH public key. This parameter allows (through its regex pattern ) a string of characters that can consist… |
| Encoding | string | yes | Specifies the public key encoding format to use in the response. To retrieve the public key in ssh-rsa format, use SSH . To retrieve the… |

### Retrieves information about the specified server certificate stored in IAM. For more information about…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-server-certificate` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ServerCertificateName | string | yes | The name of the server certificate you want to retrieve information about. This parameter allows (through its regex pattern ) a string of… |

### Retrieves a service last accessed report that was created using the GenerateServiceLastAccessedDetails…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-service-last-accessed-details` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| JobId | string | yes | The ID of the request generated by the GenerateServiceLastAccessedDetails operation. The JobId returned by… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |

### After you generate a group or policy report using the GenerateServiceLastAccessedDetails operation, you can…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-service-last-accessed-details-with-entities` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| JobId | string | yes | The ID of the request generated by the GenerateServiceLastAccessedDetails operation. |
| ServiceNamespace | string | yes | The service namespace for an Amazon Web Services service. Provide the service namespace to learn when the IAM entity last attempted to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |

### Retrieves the status of your service-linked role deletion. After you use DeleteServiceLinkedRole to submit a…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-service-linked-role-deletion-status` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| DeletionTaskId | string | yes | The deletion task identifier. This identifier is returned by the DeleteServiceLinkedRole operation in the format… |

### Retrieves information about the specified IAM user, including the user's creation date, path, unique ID, and…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the user to get information about. This parameter is optional. If it is not included, it defaults to the user making the… |

### Retrieves the specified inline policy document that is embedded in the specified IAM user. Policies returned…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-get-user-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the user who the policy is associated with. This parameter allows (through its regex pattern ) a string of characters… |
| PolicyName | string | yes | The name of the policy document to get. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |

### Returns information about the access key IDs associated with the specified IAM user. If there is none, the…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-access-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the user. This parameter allows (through its regex pattern ) a string of characters consisting of upper and lowercase… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the account alias associated with the Amazon Web Services account (Note: you can have only one). For…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-account-aliases` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists all managed policies that are attached to the specified IAM group. An IAM group can also have inline…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-attached-group-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | yes | The name (friendly name, not ARN) of the group to list attached policies for. This parameter allows (through its regex pattern ) a string… |
| PathPrefix | string | no | The path prefix for filtering the results. This parameter is optional. If it is not included, it defaults to a slash (/), listing all… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists all managed policies that are attached to the specified IAM role. An IAM role can also have inline…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-attached-role-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name (friendly name, not ARN) of the role to list attached policies for. This parameter allows (through its regex pattern ) a string… |
| PathPrefix | string | no | The path prefix for filtering the results. This parameter is optional. If it is not included, it defaults to a slash (/), listing all… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists all managed policies that are attached to the specified IAM user. An IAM user can also have inline…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-attached-user-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name (friendly name, not ARN) of the user to list attached policies for. This parameter allows (through its regex pattern ) a string… |
| PathPrefix | string | no | The path prefix for filtering the results. This parameter is optional. If it is not included, it defaults to a slash (/), listing all… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists all IAM users, groups, and roles that the specified managed policy is attached to. You can use the…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-entities-for-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the IAM policy for which you want the versions. For more information about ARNs, see Amazon Resource… |
| EntityFilter | string | no | The entity type to use for filtering the results. For example, when EntityFilter is Role , only the roles that are attached to the… |
| PathPrefix | string | no | The path prefix for filtering the results. This parameter is optional. If it is not included, it defaults to a slash (/), listing all… |
| PolicyUsageFilter | string | no | The policy usage method to use for filtering the results. To list only permissions policies, set PolicyUsageFilter to PermissionsPolicy .… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the names of the inline policies that are embedded in the specified IAM group. An IAM group can also…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-group-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | yes | The name of the group to list policies for. This parameter allows (through its regex pattern ) a string of characters consisting of upper… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the IAM groups that have the specified path prefix. You can paginate the results using the MaxItems…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-groups` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PathPrefix | string | no | The path prefix for filtering the results. For example, the prefix /division_abc/subdivision_xyz/ gets all groups whose path starts with… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the IAM groups that the specified IAM user belongs to. You can paginate the results using the MaxItems…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-groups-for-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the user to list groups for. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the tags that are attached to the specified IAM instance profile. The returned list of tags is sorted…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-instance-profile-tags` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| InstanceProfileName | string | yes | The name of the IAM instance profile whose tags you want to see. This parameter allows (through its regex pattern ) a string of characters… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the instance profiles that have the specified path prefix. If there are none, the operation returns an…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-instance-profiles` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PathPrefix | string | no | The path prefix for filtering the results. For example, the prefix /application_abc/component_xyz/ gets all instance profiles whose path… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the instance profiles that have the specified associated IAM role. If there are none, the operation…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-instance-profiles-for-role` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name of the role to list instance profiles for. This parameter allows (through its regex pattern ) a string of characters consisting… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the tags that are attached to the specified IAM virtual multi-factor authentication (MFA) device. The…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-mfadevice-tags` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SerialNumber | string | yes | The unique identifier for the IAM virtual MFA device whose tags you want to see. For virtual MFA devices, the serial number is the same as… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the MFA devices for an IAM user. If the request includes a IAM user name, then this operation lists…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-mfadevices` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the user whose MFA devices you want to list. This parameter allows (through its regex pattern ) a string of characters… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the tags that are attached to the specified OpenID Connect (OIDC)-compatible identity provider. The…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-open-idconnect-provider-tags` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| OpenIDConnectProviderArn | string | yes | The ARN of the OpenID Connect (OIDC) identity provider whose tags you want to see. This parameter allows (through its regex pattern ) a… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists information about the IAM OpenID Connect (OIDC) provider resource objects defined in the Amazon Web…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-open-idconnect-providers` (byok)

### Lists all the managed policies that are available in your Amazon Web Services account, including your own…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Scope | string | no | The scope to use for filtering the results. To list only Amazon Web Services managed policies, set Scope to AWS . To list only the… |
| OnlyAttached | boolean | no | A flag to filter the results to only the attached policies. When OnlyAttached is true , the returned list contains only the policies that… |
| PathPrefix | string | no | The path prefix for filtering the results. This parameter is optional. If it is not included, it defaults to a slash (/), listing all… |
| PolicyUsageFilter | string | no | The policy usage method to use for filtering the results. To list only permissions policies, set PolicyUsageFilter to PermissionsPolicy .… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Retrieves a list of policies that the IAM identity (user, group, or role) can use to access each specified…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-policies-granting-service-access` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| Arn | string | yes | The ARN of the IAM identity (user, group, or role) whose policies you want to list. |
| ServiceNamespaces | array | yes | The service namespace for the Amazon Web Services services whose policies you want to list. To learn the service namespace for a service,… |

### Lists the tags that are attached to the specified IAM customer managed policy. The returned list of tags is…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-policy-tags` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyArn | string | yes | The ARN of the IAM customer managed policy whose tags you want to see. This parameter allows (through its regex pattern ) a string of… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists information about the versions of the specified managed policy, including the version that is…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-policy-versions` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PolicyArn | string | yes | The Amazon Resource Name (ARN) of the IAM policy for which you want the versions. For more information about ARNs, see Amazon Resource… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the names of the inline policies that are embedded in the specified IAM role. An IAM role can also…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-role-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name of the role to list policies for. This parameter allows (through its regex pattern ) a string of characters consisting of upper… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the tags that are attached to the specified role. The returned list of tags is sorted by tag key. For…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-role-tags` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name of the IAM role for which you want to see the list of tags. This parameter accepts (through its regex pattern ) a string of… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the IAM roles that have the specified path prefix. If there are none, the operation returns an empty…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-roles` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PathPrefix | string | no | The path prefix for filtering the results. For example, the prefix /application_abc/component_xyz/ gets all roles whose path starts with… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the tags that are attached to the specified Security Assertion Markup Language (SAML) identity…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-samlprovider-tags` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| SAMLProviderArn | string | yes | The ARN of the Security Assertion Markup Language (SAML) identity provider whose tags you want to see. This parameter allows (through its… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the SAML provider resource objects defined in IAM in the account. IAM resource-listing operations…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-samlproviders` (byok)

### Returns information about the SSH public keys associated with the specified IAM user. If none exists, the…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-sshpublic-keys` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the IAM user to list SSH public keys for. If none is specified, the UserName field is determined implicitly based on the… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the tags that are attached to the specified IAM server certificate. The returned list of tags is…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-server-certificate-tags` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| ServerCertificateName | string | yes | The name of the IAM server certificate whose tags you want to see. This parameter allows (through its regex pattern ) a string of… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the server certificates stored in IAM that have the specified path prefix. If none exist, the…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-server-certificates` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PathPrefix | string | no | The path prefix for filtering the results. For example: /company/servercerts would get all server certificates for which the path starts… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Returns information about the service-specific credentials associated with the specified IAM user. If none…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-service-specific-credentials` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the user whose service-specific credentials you want information about. If this value is not specified, then the operation… |
| ServiceName | string | no | Filters the returned results to only those for the specified Amazon Web Services service. If not specified, then Amazon Web Services… |

### Returns information about the signing certificates associated with the specified IAM user. If none exists,…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-signing-certificates` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | no | The name of the IAM user whose signing certificates you want to examine. This parameter allows (through its regex pattern ) a string of… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the names of the inline policies embedded in the specified IAM user. An IAM user can also have managed…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-user-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the user to list policies for. This parameter allows (through its regex pattern ) a string of characters consisting of upper… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the tags that are attached to the specified IAM user. The returned list of tags is sorted by tag key.…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-user-tags` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the IAM user whose tags you want to see. This parameter allows (through its regex pattern ) a string of characters consisting… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the IAM users that have the specified path prefix. If no path prefix is specified, the operation…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-users` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| PathPrefix | string | no | The path prefix for filtering the results. For example: /division_abc/subdivision_xyz/ , which would get all user names whose path starts… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Lists the virtual MFA devices defined in the Amazon Web Services account by assignment status. If you do not…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-list-virtual-mfadevices` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| AssignmentStatus | string | no | The status ( Unassigned or Assigned ) of the devices to list. If you do not specify an AssignmentStatus , the operation defaults to Any ,… |
| Marker | string | no | Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to… |
| MaxItems | integer | no | Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond… |

### Adds or updates an inline policy document that is embedded in the specified IAM group. A user can also have…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-put-group-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | yes | The name of the group to associate the policy with. This parameter allows (through its regex pattern ) a string of characters consisting… |
| PolicyName | string | yes | The name of the policy document. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |
| PolicyDocument | string | yes | The policy document. You must provide policies in JSON format in IAM. However, for CloudFormation templates formatted in YAML, you can… |

### Adds or updates the policy that is specified as the IAM role's permissions boundary. You can use an Amazon…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-put-role-permissions-boundary` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name (friendly name, not ARN) of the IAM role for which you want to set the permissions boundary. |
| PermissionsBoundary | string | yes | The ARN of the managed policy that is used to set the permissions boundary for the role. A permissions boundary policy defines the maximum… |

### Adds or updates an inline policy document that is embedded in the specified IAM role. When you embed an…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-put-role-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| RoleName | string | yes | The name of the role to associate the policy with. This parameter allows (through its regex pattern ) a string of characters consisting of… |
| PolicyName | string | yes | The name of the policy document. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |
| PolicyDocument | string | yes | The policy document. You must provide policies in JSON format in IAM. However, for CloudFormation templates formatted in YAML, you can… |

### Adds or updates the policy that is specified as the IAM user's permissions boundary. You can use an Amazon…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-put-user-permissions-boundary` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name (friendly name, not ARN) of the IAM user for which you want to set the permissions boundary. |
| PermissionsBoundary | string | yes | The ARN of the managed policy that is used to set the permissions boundary for the user. A permissions boundary policy defines the maximum… |

### Adds or updates an inline policy document that is embedded in the specified IAM user. An IAM user can also…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-put-user-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| UserName | string | yes | The name of the user to associate the policy with. This parameter allows (through its regex pattern ) a string of characters consisting of… |
| PolicyName | string | yes | The name of the policy document. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |
| PolicyDocument | string | yes | The policy document. You must provide policies in JSON format in IAM. However, for CloudFormation templates formatted in YAML, you can… |

### Removes the specified client ID (also known as audience) from the list of client IDs registered for the…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-remove-client-idfrom-open-idconnect-provider` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| OpenIDConnectProviderArn | string | yes | The Amazon Resource Name (ARN) of the IAM OIDC provider resource to remove the client ID from. You can get a list of OIDC provider ARNs by… |
| ClientID | string | yes | The client ID (also known as audience) to remove from the IAM OIDC provider resource. For more information about client IDs, see… |

### Removes the specified IAM role from the specified EC2 instance profile. Make sure that you do not have any…
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-remove-role-from-instance-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| InstanceProfileName | string | yes | The name of the instance profile to update. This parameter allows (through its regex pattern ) a string of characters consisting of upper… |
| RoleName | string | yes | The name of the role to remove. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |

### Removes the specified user from the specified group.
`GET https://apizie.tech/v1/cloud:amazonaws-iam/get-remove-user-from-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| GroupName | string | yes | The name of the group to update. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |
| UserName | string | yes | The name of the user to remove. This parameter allows (through its regex pattern ) a string of characters consisting of upper and… |

…and 39 more. See the OpenAPI spec.

## Example
```
curl "https://apizie.tech/v1/cloud:amazonaws-iam/get-add-client-idto-open-idconnect-provider" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the AWS Identity and Access Management API?
Create a free Apizie key, then send GET https://apizie.tech/v1/cloud:amazonaws-iam/get-add-client-idto-open-idconnect-provider with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the AWS Identity and Access Management API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. AWS Identity and Access Management itself also needs your own key from amazonaws.com.

### Can AI agents use the AWS Identity and Access Management API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-iam.

### What is the status of the AWS Identity and Access Management API?
Needs your own provider key (bring your own key)