generated: '2026-06-20'
method: derived
source: openapi/amazon-appflow-openapi.yml
notes: >-
  Derived from the AppFlow OpenAPI security schemes, response media types,
  pagination and idempotency conventions. AppFlow is an AWS JSON-protocol
  service authenticated with SigV4, not OAuth2/OIDC, and does not emit
  RFC 9457 problem+json errors.
standards:
- id: aws-sigv4
  conforms: true
  evidence: securitySchemes sigv4; every operation requires AWS Signature Version 4.
- id: oauth2
  conforms: false
  evidence: No oauth2 security scheme; service uses AWS SigV4. (OAuth2 is used only between AppFlow and downstream SaaS connectors, not on this API.)
- id: oidc
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors return application/json ErrorResponse objects, not application/problem+json.
- id: pagination
  conforms: true
  evidence: List/describe operations accept maxResults and return nextToken cursor tokens.
- id: idempotency
  conforms: true
  evidence: createFlow accepts a clientToken idempotency token.
- id: json-api
  conforms: false
- id: fhir-r4
  conforms: false
- id: scim2
  conforms: false
- id: odata
  conforms: false
- id: fapi
  conforms: false
- id: psd2
  conforms: false