Skip to content
Skip to main content

IAM credentials

Create and manage IAM credentials of type api_key attached to principals. Credentials inherit the principal's policy, and creation returns the secret only once. Requests require an organization-bound IAM API key with the corresponding iam.credentials.* permission. See credential creation and rotation.

Endpoints

5
GET
List IAM credentials
GET /v3/iam/principals/{principal_id}/credentials

Requires iam.credentials.read on an active principal bound to the authenticated organization. Authenticate with an active, unexpired IAM credential of type api key. Application API keys (including leg...

POST
Create IAM credential
POST /v3/iam/principals/{principal_id}/credentials

Requires iam.credentials.create on an active principal bound to the authenticated organization. Authenticate with an active, unexpired IAM credential of type api key. Application API keys (including l...

GET
Get IAM credential
GET /v3/iam/principals/{principal_id}/credentials/{credential_id}

Requires iam.credentials.read on an active principal bound to the authenticated organization. Authenticate with an active, unexpired IAM credential of type api key. Application API keys (including leg...

PATCH
Update IAM credential
PATCH /v3/iam/principals/{principal_id}/credentials/{credential_id}

Requires iam.credentials.update on an active principal bound to the authenticated organization. Authenticate with an active, unexpired IAM credential of type api key. Application API keys (including l...

DELETE
Delete IAM credential
DELETE /v3/iam/principals/{principal_id}/credentials/{credential_id}

Requires iam.credentials.delete on an active principal bound to the authenticated organization. Authenticate with an active, unexpired IAM credential of type api key. Application API keys (including l...