Skip to main content
GET
Get Barndoor's AWS principal for role-assumption trust policies

Authorizations

Authorization
string
header
required

A Barndoor API key, sent as Authorization: Bearer <key>. Keys are prefixed bdai_ and are opaque — do not attempt to decode one. Interchangeable with an OAuth 2.0 access token.

Response

The requested record

Whether Barndoor's own AWS principal is configured for role-assumption trust policies.

Named with the service prefix because dlp-service publishes a type of the same shape under the unprefixed name, and the merged document has ONE global component namespace. The generator fails closed on two services defining the same referenced component differently, which is how this was caught. Making the two byte-identical instead would silently couple two services' schemas and turn any later divergence into a hard failure of the whole spec.

configured
boolean
required

True when Barndoor has a principal ARN to put in a customer trust policy.

principal_arn
string | null

The ARN customers name as the trusted principal; null when unconfigured.