Skip to main content
GET
Get AWS trust info

Authorizations

Authorization
string
header
required

An access token from Barndoor's identity provider, sent as Authorization: Bearer <token>. Use a service-account token from the OAuth 2.0 client-credentials grant for scripts and CI, or a signed-in user's token. The caller needs the admin role in the organization. Gateway API keys (bd-...) are not accepted here.

Path Parameters

id
string<uuid>
required

Record ID (UUID)

Response

OK

The pair a customer needs to write an aws_role trust policy.

external_id
string
required

The per-credential external ID to require in the trust policy's condition.

principal_arn
string
required

Barndoor's principal ARN, to trust in the customer's role.