Identity and Access Management Access Analyzer helps you to set, verify, and refine your IAM policies by providing a suite of capabilities. Its features include findings for external and unused access, basic and custom policy checks for validating policies, and policy generation to generate fine-grained policies. To start using IAM Access Analyzer to identify external or unused access, you first need to create an analyzer.
External access analyzers help identify potential risks of accessing resources by enabling you to identify any resource policies that grant access to an external principal. It does this by using logic-based reasoning to analyze resource-based policies in your Amazon Web Services environment. An external principal can be another Amazon Web Services account, a root user, an IAM user or role, a federated user, an Amazon Web Services service, or an anonymous user. You can also use IAM Access Analyzer to preview public and cross-account access to your resources before deploying permissions changes.
Unused access analyzers help identify potential identity access risks by enabling you to identify unused IAM roles, unused access keys, unused console passwords, and IAM principals with unused service and action-level permissions.
Beyond findings, IAM Access Analyzer provides basic and custom policy checks to validate IAM policies before deploying permissions changes. You can use policy generation to refine permissions by attaching a policy generated using access activity logged in CloudTrail logs.
This guide describes the IAM Access Analyzer operations that you can call programmatically. For general information about IAM Access Analyzer, see Identity and Access Management Access Analyzer in the IAM User Guide.
tags: - name: Domains paths: /v1/domains: POST: summary: Amazon Web Services Listdomains description: ' Returns a list of DomainSummary objects for all domains owned by the Amazon Web Services account that makes this call. Each returned DomainSummary object contains information about a domain. ' operationId: amazonWebServicesListDomains tags: - Domains /domains/{domainId}/fields-batch: POST: summary: Amazon Web Services Batchgetfield description: 'Returns the description for the list of fields in the request parameters. ' operationId: amazonWebServicesBatchGetField tags: - Domains /domains/{domainId}/fields/{fieldId}/options: PUT: summary: Amazon Web Services Batchputfieldoptions description: Creates and updates a set of field options for a single select field in a Cases domain. operationId: amazonWebServicesBatchPutFieldOptions tags: - Domains /domains/{domainId}/cases: POST: summary: Amazon Web Services Createcase description: ' If you provide a value for PerformedBy.UserArn you must also have connect:DescribeUser permission on the User ARN resource that you provide <p>Creates a case in the specified Cases domain. Case system and custom fields are taken as an array id/value pairs with a declared data types.</p> <p>The following fields are required when creating a case:</p> <ul> <li> <p> <code>customer_id</code> - You must provide the full customer profile ARN in this format: <code>arn:aws:profile:your_AWS_Region:your_AWS_account ID:domains/your_profiles_domain_name/profiles/profile_ID</code> </p> </li> <li> <p> <code>title</code> </p> </li> </ul> ' operationId: amazonWebServicesCreateCase tags: - Domains /domains: POST: summary: Amazon Web Services Createdomain description: 'Creates a domain, which is a container for all case data, such as cases, fields, templates and layouts. Each Amazon Connect instance can be associated with only one Cases domain. This will not associate your connect instance to Cases domain. Instead, use the Amazon Connect CreateIntegrationAssociation API. You need specific IAM permissions to successfully associate the Cases domain. For more information, see Onboard to Cases. </important> ' operationId: amazonWebServicesCreateDomain tags: - Domains GET: summary: Amazon Web Services Listdomains description: Returns a list of all the domains for an AWS account that have been created. operationId: amazonWebServicesListDomains tags: - Domains /domains/{domainId}/fields: POST: summary: Amazon Web Services Createfield description: 'Creates a field in the Cases domain. This field is used to define the case object model (that is, defines what data can be captured on cases) in a Cases domain. ' operationId: amazonWebServicesCreateField tags: - Domains /domains/{domainId}/layouts: POST: summary: Amazon Web Services Createlayout description: 'Creates a layout in the Cases domain. Layouts define the following configuration in the top section and More Info tab of the Cases user interface: Fields to display to the users Field ordering Title and Status fields cannot be part of layouts since they are not configurable. ' operationId: amazonWebServicesCreateLayout tags: - Domains /domains/{domainId}/cases/{caseId}/related-items/: POST: summary: Amazon Web Services Createrelateditem description: 'Creates a related item (comments, tasks, and contacts) and associates it with a case. A Related Item is a resource that is associated with a case. It may or may not have an external identifier linking it to an external resource (for example, a contactArn). All Related Items have their own internal identifier, the relatedItemArn. Examples of related items include comments and contacts. If you provide a value for performedBy.userArn you must also have DescribeUser permission on the ARN of the user that you provide. </note> ' operationId: amazonWebServicesCreateRelatedItem tags: - Domains /domains/{domainId}/templates: POST: summary: Amazon Web Services Createtemplate description: Creates a template in the Cases domain. This template is used to define the case object model (that is, to define what data can be captured on cases) in a Cases domain. A template must have a unique name within a domain, and it must reference existing field IDs and layout IDs. Additionally, multiple fields with same IDs are not allowed within the same Template. A template can be either Active or Inactive, as indicated by its status. Inactive templates cannot be used to create cases. operationId: amazonWebServicesCreateTemplate tags: - Domains /domains/{domainId}: POST: summary: Amazon Web Services Getdomain description: 'Returns information about a specific domain if it exists. ' operationId: amazonWebServicesGetDomain tags: - Domains /domains/{domainId}/cases/{caseId}: PUT: summary: Amazon Web Services Updatecase description: ' If you provide a value for PerformedBy.UserArn you must also have connect:DescribeUser permission on the User ARN resource that you provide <p>Updates the values of fields on a case. Fields to be updated are received as an array of id/value pairs identical to the <code>CreateCase</code> input .</p> <p>If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.</p> ' operationId: amazonWebServicesUpdateCase tags: - Domains /domains/{domainId}/cases/{caseId}/audit-history: POST: summary: Amazon Web Services Getcaseauditevents description: Returns the audit history about a specific case if it exists. operationId: amazonWebServicesGetCaseAuditEvents tags: - Domains /domains/{domainId}/case-event-configuration: PUT: summary: Amazon Web Services Putcaseeventconfiguration description: 'Adds case event publishing configuration. For a complete list of fields you can add to the event message, see Create case fields in the Amazon Connect Administrator Guide ' operationId: amazonWebServicesPutCaseEventConfiguration tags: - Domains /domains/{domainId}/layouts/{layoutId}: PUT: summary: Amazon Web Services Updatelayout description: 'Updates the attributes of an existing layout. If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body. A ValidationException is returned when you add non-existent fieldIds to a layout. Title and Status fields cannot be part of layouts because they are not configurable. ' operationId: amazonWebServicesUpdateLayout tags: - Domains /domains/{domainId}/templates/{templateId}: PUT: summary: Amazon Web Services Updatetemplate description: Updates the attributes of an existing template. The template attributes that can be modified include name, description, layoutConfiguration, requiredFields, and status. At least one of these attributes must not be null. If a null value is provided for a given attribute, that attribute is ignored and its current value is preserved. operationId: amazonWebServicesUpdateTemplate tags: - Domains /domains/{domainId}/list-cases-for-contact: POST: summary: Amazon Web Services Listcasesforcontact description: Lists cases for a given contact. operationId: amazonWebServicesListCasesForContact tags: - Domains /domains/{domainId}/fields/{fieldId}/options-list: POST: summary: Amazon Web Services Listfieldoptions description: 'Lists all of the field options for a field identifier in the domain. ' operationId: amazonWebServicesListFieldOptions tags: - Domains /domains/{domainId}/fields-list: POST: summary: Amazon Web Services Listfields description: Lists all fields in a Cases domain. operationId: amazonWebServicesListFields tags: - Domains /domains/{domainId}/layouts-list: POST: summary: Amazon Web Services Listlayouts description: Lists all layouts in the given cases domain. Each list item is a condensed summary object of the layout. operationId: amazonWebServicesListLayouts tags: - Domains /domains/{domainId}/templates-list: POST: summary: Amazon Web Services Listtemplates description: 'Lists all of the templates in a Cases domain. Each list item is a condensed summary object of the template. ' operationId: amazonWebServicesListTemplates tags: - Domains /domains/{domainId}/cases-search: POST: summary: Amazon Web Services Searchcases description: 'Searches for cases within their associated Cases domain. Search results are returned as a paginated list of abridged case documents. For customer_id you must provide the full customer profile ARN in this format: arn:aws:profile:your AWS Region:your AWS account ID:domains/profiles domain name/profiles/profile ID. ' operationId: amazonWebServicesSearchCases tags: - Domains /domains/{domainId}/cases/{caseId}/related-items-search: POST: summary: Amazon Web Services Searchrelateditems description: 'Searches for related items that are associated with a case. If no filters are provided, this returns all related items associated with a case. ' operationId: amazonWebServicesSearchRelatedItems tags: - Domains /domains/{domainId}/fields/{fieldId}: PUT: summary: Amazon Web Services Updatefield description: 'Updates the properties of an existing field. ' operationId: amazonWebServicesUpdateField tags: - Domains /domains/{DomainName}/profiles/keys: POST: summary: Amazon Web Services Addprofilekey description: Associates a new key value with a specific profile, such as a Contact Record ContactId. A profile object can have a single unique key and any number of additional keys that can be used to identify the profile that it belongs to. operationId: amazonWebServicesAddProfileKey tags: - Domains /domains/{DomainName}/calculated-attributes/{CalculatedAttributeName}: PUT: summary: Amazon Web Services Updatecalculatedattributedefinition description: Updates an existing calculated attribute definition. When updating the Conditions, note that increasing the date range of a calculated attribute will not trigger inclusion of historical data greater than the current date range. operationId: amazonWebServicesUpdateCalculatedAttributeDefinition tags: - Domains /domains/{DomainName}: PUT: summary: Amazon Web Services Updatedomain description: 'Updates the properties of a domain, including creating or selecting a dead letter queue or an encryption key. After a domain is created, the name can’t be changed. Use this API or CreateDomain to enable identity resolution: set Matching to true. To prevent cross-service impersonation when you call this API, see Cross-service confused deputy prevention for sample policies that you should apply. To add or remove tags on an existing Domain, see TagResource/UntagResource.' operationId: amazonWebServicesUpdateDomain tags: - Domains /domains/{DomainName}/event-streams/{EventStreamName}: GET: summary: Amazon Web Services Geteventstream description: Returns information about the specified event stream in a specific domain. operationId: amazonWebServicesGetEventStream tags: - Domains /domains/{DomainName}/workflows/integrations: POST: summary: Amazon Web Services Createintegrationworkflow description: ' Creates an integration workflow. An integration workflow is an async process which ingests historic data and sets up an integration for ongoing updates. The supported Amazon AppFlow sources are Salesforce, ServiceNow, and Marketo. ' operationId: amazonWebServicesCreateIntegrationWorkflow tags: - Domains /domains/{DomainName}/profiles: PUT: summary: Amazon Web Services Updateprofile description: Updates the properties of a profile. The ProfileId is required for updating a customer profile. When calling the UpdateProfile API, specifying an empty string value means that any existing value will be removed. Not specifying a string value means that any value already there will be kept. operationId: amazonWebServicesUpdateProfile tags: - Domains /domains/{DomainName}/integrations/delete: POST: summary: Amazon Web Services Deleteintegration description: Removes an integration from a specific domain. operationId: amazonWebServicesDeleteIntegration tags: - Domains /domains/{DomainName}/profiles/delete: POST: summary: Amazon Web Services Deleteprofile description: Deletes the standard customer profile and all data pertaining to the profile. operationId: amazonWebServicesDeleteProfile tags: - Domains /domains/{DomainName}/profiles/keys/delete: POST: summary: Amazon Web Services Deleteprofilekey description: Removes a searchable key from a customer profile. operationId: amazonWebServicesDeleteProfileKey tags: - Domains /domains/{DomainName}/profiles/objects/delete: POST: summary: Amazon Web Services Deleteprofileobject description: Removes an object associated with a profile of a given ProfileObjectType. operationId: amazonWebServicesDeleteProfileObject tags: - Domains /domains/{DomainName}/object-types/{ObjectTypeName}: PUT: summary: Amazon Web Services Putprofileobjecttype description: Defines a ProfileObjectType. To add or remove tags on an existing ObjectType, see TagResource/UntagResource. operationId: amazonWebServicesPutProfileObjectType tags: - Domains /domains/{DomainName}/workflows/{WorkflowId}: GET: summary: Amazon Web Services Getworkflow description: Get details of specified workflow. operationId: amazonWebServicesGetWorkflow tags: - Domains /domains/{DomainName}/detect/object-types: POST: summary: Amazon Web Services Detectprofileobjecttype description: The process of detecting profile object type mapping by using given objects. operationId: amazonWebServicesDetectProfileObjectType tags: - Domains /domains/{DomainName}/identity-resolution-jobs/auto-merging-preview: POST: summary: Amazon Web Services Getautomergingpreview description: 'Tests the auto-merging settings of your Identity Resolution Job without merging your data. It randomly selects a sample of matching groups from the existing matching results, and applies the automerging settings that you provided. You can then view the number of profiles in the sample, the number of matches, and the number of profiles identified to be merged. This enables you to evaluate the accuracy of the attributes in your matching list. You can''t view which profiles are matched and would be merged. We strongly recommend you use this API to do a dry run of the automerging process before running the Identity Resolution Job. Include at least two matching attributes. If your matching list includes too few attributes (such as only FirstName or only LastName), there may be a large number of matches. This increases the chances of erroneous merges. ' operationId: amazonWebServicesGetAutoMergingPreview tags: - Domains /domains/{DomainName}/profile/{ProfileId}/calculated-attributes/{CalculatedAttributeName}: GET: summary: Amazon Web Services Getcalculatedattributeforprofile description: Retrieve a calculated attribute for a customer profile. operationId: amazonWebServicesGetCalculatedAttributeForProfile tags: - Domains /domains/{DomainName}/identity-resolution-jobs/{JobId}: GET: summary: Amazon Web Services Getidentityresolutionjob description: Returns information about an Identity Resolution Job in a specific domain. Identity Resolution Jobs are set up using the Amazon Connect admin console. For more information, see Use Identity Resolution to consolidate similar profiles. operationId: amazonWebServicesGetIdentityResolutionJob tags: - Domains /domains/{DomainName}/integrations: PUT: summary: Amazon Web Services Putintegration description: Adds an integration between the service and a third-party service, which includes Amazon AppFlow and Amazon Connect. An integration can belong to only one domain. To add or remove tags on an existing Integration, see TagResource / UntagResource. operationId: amazonWebServicesPutIntegration tags: - Domains /domains/{DomainName}/matches: POST: summary: Amazon Web Services Getsimilarprofiles description: Returns a set of profiles that belong to the same matching group using the matchId or profileId. You can also specify the type of matching that you want for finding similar profiles using either RULE_BASED_MATCHING or ML_BASED_MATCHING. operationId: amazonWebServicesGetSimilarProfiles tags: - Domains /domains/{DomainName}/workflows/{WorkflowId}/steps: GET: summary: Amazon Web Services Getworkflowsteps description: Get granular list of steps in workflow. operationId: amazonWebServicesGetWorkflowSteps tags: - Domains /domains/{DomainName}/calculated-attributes: GET: summary: Amazon Web Services Listcalculatedattributedefinitions description: Lists calculated attribute definitions for Customer Profiles operationId: amazonWebServicesListCalculatedAttributeDefinitions tags: - Domains /domains/{DomainName}/profile/{ProfileId}/calculated-attributes: GET: summary: Amazon Web Services Listcalculatedattributesforprofile description: Retrieve a list of calculated attributes for a customer profile. operationId: amazonWebServicesListCalculatedAttributesForProfile tags: - Domains /domains/{DomainName}/event-streams: GET: summary: Amazon Web Services Listeventstreams description: Returns a list of all the event streams in a specific domain. operationId: amazonWebServicesListEventStreams tags: - Domains /domains/{DomainName}/identity-resolution-jobs: GET: summary: Amazon Web Services Listidentityresolutionjobs description: Lists all of the Identity Resolution Jobs in your domain. The response sorts the list by JobStartTime. operationId: amazonWebServicesListIdentityResolutionJobs tags: - Domains /domains/{DomainName}/object-types: GET: summary: Amazon Web Services Listprofileobjecttypes description: Lists all of the templates available within the service. operationId: amazonWebServicesListProfileObjectTypes tags: - Domains /domains/{DomainName}/profiles/objects: PUT: summary: Amazon Web Services Putprofileobject description: Adds additional objects to customer profiles of a given ObjectType. When adding a specific profile object, like a Contact Record, an inferred profile can get created if it is not mapped to an existing profile. The resulting profile will only have a phone number populated in the standard ProfileObject. Any additional Contact Records with the same phone number will be mapped to the same inferred profile. When a ProfileObject is created and if a ProfileObjectType already exists for the ProfileObject, it will provide data to a standard profile depending on the ProfileObjectType definition. PutProfileObject needs an ObjectType, which can be created using PutProfileObjectType. operationId: amazonWebServicesPutProfileObject tags: - Domains /domains/{DomainName}/profiles/ruleBasedMatches: GET: summary: Amazon Web Services Listrulebasedmatches description: Returns a set of MatchIds that belong to the given domain. operationId: amazonWebServicesListRuleBasedMatches tags: - Domains /domains/{DomainName}/workflows: POST: summary: Amazon Web Services Listworkflows description: Query to list all workflows. operationId: amazonWebServicesListWorkflows tags: - Domains /domains/{DomainName}/profiles/objects/merge: POST: summary: Amazon Web Services Mergeprofiles description: 'Runs an AWS Lambda job that does the following: All the profileKeys in the ProfileToBeMerged will be moved to the main profile. All the objects in the ProfileToBeMerged will be moved to the main profile. All the ProfileToBeMerged will be deleted at the end. All the profileKeys in the ProfileIdsToBeMerged will be moved to the main profile. Standard fields are merged as follows: Fields are always "union"-ed if there are no conflicts in standard fields or attributeKeys. When there are conflicting fields: If no SourceProfileIds entry is specified, the main Profile value is always taken. If a SourceProfileIds entry is specified, the specified profileId is always taken, even if it is a NULL value. You can use MergeProfiles together with GetMatches, which returns potentially matching profiles, or use it with the results of another matching system. After profiles have been merged, they cannot be separated (unmerged).' operationId: amazonWebServicesMergeProfiles tags: - Domains /domains/{DomainName}/profiles/search: POST: summary: Amazon Web Services Searchprofiles description: Searches for profiles within a specific domain using one or more predefined search keys (e.g., _fullName, _phone, _email, _account, etc.) and/or custom-defined search keys. A search key is a data type pair that consists of a KeyName and Values list. This operation supports searching for profiles with a minimum of 1 key-value(s) pair and up to 5 key-value(s) pairs using either AND or OR logic. operationId: amazonWebServicesSearchProfiles tags: - Domains /v2/domains/{domainIdentifier}/assets/{identifier}/accept-predictions: PUT: summary: Amazon Web Services Acceptpredictions description: Accepts automatically generated business-friendly metadata for your Amazon DataZone assets. operationId: amazonWebServicesAcceptPredictions tags: - Domains /v2/domains/{domainIdentifier}/subscription-requests/{identifier}/accept: PUT: summary: Amazon Web Services Acceptsubscriptionrequest description: 'Accepts a subscription request to a specific asset. ' operationId: amazonWebServicesAcceptSubscriptionRequest tags: - Domains /v2/domains/{domainIdentifier}/subscriptions/{identifier}/cancel: PUT: summary: Amazon Web Services Cancelsubscription description: Cancels the subscription to the specified asset. operationId: amazonWebServicesCancelSubscription tags: - Domains /v2/domains/{domainIdentifier}/assets: POST: summary: Amazon Web Services Createasset description: Creates an asset in Amazon DataZone catalog. operationId: amazonWebServicesCreateAsset tags: - Domains /v2/domains/{domainIdentifier}/assets/{identifier}/revisions: GET: summary: Amazon Web Services Listassetrevisions description: Lists the revisions for the asset. operationId: amazonWebServicesListAssetRevisions tags: - Domains /v2/domains/{domainIdentifier}/asset-types: POST: summary: Amazon Web Services Createassettype description: Creates a custom asset type. operationId: amazonWebServicesCreateAssetType tags: - Domains /v2/domains/{domainIdentifier}/data-sources: GET: summary: Amazon Web Services Listdatasources description: Lists data sources in Amazon DataZone. operationId: amazonWebServicesListDataSources tags: - Domains /v2/domains: GET: summary: Amazon Web Services Listdomains description: Lists Amazon DataZone domains. operationId: amazonWebServicesListDomains tags: - Domains /v2/domains/{domainIdentifier}/environments: GET: summary: Amazon Web Services Listenvironments description: Lists Amazon DataZone environments. operationId: amazonWebServicesListEnvironments tags: - Domains /v2/domains/{domainIdentifier}/environment-profiles: GET: summary: Amazon Web Services Listenvironmentprofiles description: Lists Amazon DataZone environment profiles. operationId: amazonWebServicesListEnvironmentProfiles tags: - Domains /v2/domains/{domainIdentifier}/form-types: POST: summary: Amazon Web Services Createformtype description: Creates a metadata form type. operationId: amazonWebServicesCreateFormType tags: - Domains /v2/domains/{domainIdentifier}/glossaries: POST: summary: Amazon Web Services Createglossary description: Creates an Amazon DataZone business glossary. operationId: amazonWebServicesCreateGlossary tags: - Domains /v2/domains/{domainIdentifier}/glossary-terms: POST: summary: Amazon Web Services Createglossaryterm description: Creates a business glossary term. operationId: amazonWebServicesCreateGlossaryTerm tags: - Domains /v2/domains/{domainIdentifier}/group-profiles: POST: summary: Amazon Web Services Creategroupprofile description: Creates a group profile in Amazon DataZone. operationId: amazonWebServicesCreateGroupProfile tags: - Domains /v2/domains/{domainIdentifier}/listings/change-set: POST: summary: Amazon Web Services Createlistingchangeset description: '' operationId: amazonWebServicesCreateListingChangeSet tags: - Domains /v2/domains/{domainIdentifier}/projects: GET: summary: Amazon Web Services Listprojects description: Lists Amazon DataZone projects. operationId: amazonWebServicesListProjects tags: - Domains /v2/domains/{domainIdentifier}/projects/{projectIdentifier}/createMembership: POST: summary: Amazon Web Services Createprojectmembership description: Creates a project membership in Amazon DataZone. operationId: amazonWebServicesCreateProjectMembership tags: - Domains /v2/domains/{domainIdentifier}/subscription-grants: GET: summary: Amazon Web Services Listsubscriptiongrants description: Lists subscription grants. operationId: amazonWebServicesListSubscriptionGrants tags: - Domains /v2/domains/{domainIdentifier}/subscription-requests: GET: summary: Amazon Web Services Listsubscriptionrequests description: Lists Amazon DataZone subscription requests. operationId: amazonWebServicesListSubscriptionRequests tags: - Domains /v2/domains/{domainIdentifier}/environments/{environmentIdentifier}/subscription-targets: GET: summary: Amazon Web Services Listsubscriptiontargets description: Lists subscription targets in Amazon DataZone. operationId: amazonWebServicesListSubscriptionTargets tags: - Domains /v2/domains/{domainIdentifier}/user-profiles: POST: summary: Amazon Web Services Createuserprofile description: Creates a user profile in Amazon DataZone. operationId: amazonWebServicesCreateUserProfile tags: - Domains /v2/domains/{domainIdentifier}/assets/{identifier}: GET: summary: Amazon Web Services Getasset description: Gets an Amazon DataZone asset. operationId: amazonWebServicesGetAsset tags: - Domains /v2/domains/{domainIdentifier}/asset-types/{identifier}: GET: summary: Amazon Web Services Getassettype description: Gets an Amazon DataZone asset type. operationId: amazonWebServicesGetAssetType tags: - Domains /v2/domains/{domainIdentifier}/data-sources/{identifier}: PATCH: summary: Amazon Web Services Updatedatasource description: Updates the specified data source in Amazon DataZone. operationId: amazonWebServicesUpdateDataSource tags: - Domains /v2/domains/{identifier}: PUT: summary: Amazon Web Services Updatedomain description: Updates a Amazon DataZone domain. operationId: amazonWebServicesUpdateDomain tags: - Domains /v2/domains/{domainIdentifier}/environments/{identifier}: PATCH: summary: Amazon Web Services Updateenvironment description: Updates the specified environment in Amazon DataZone. operationId: amazonWebServicesUpdateEnvironment tags: - Domains /v2/domains/{domainIdentifier}/environment-blueprint-configurations/{environmentBlueprintIdentifier}: PUT: summary: Amazon Web Services Putenvironmentblueprintconfiguration description: Writes the configuration for the specified environment blueprint in Amazon DataZone. operationId: amazonWebServicesPutEnvironmentBlueprintConfiguration tags: - Domains /v2/domains/{domainIdentifier}/environment-profiles/{identifier}: PATCH: summary: Amazon Web Services Updateenvironmentprofile description: Updates the specified environment profile in Amazon DataZone. operationId: amazonWebServicesUpdateEnvironmentProfile tags: - Domains /v2/domains/{domainIdentifier}/form-types/{formTypeIdentifier}: GET: summary: Amazon Web Services Getformtype description: Gets a metadata form type in Amazon DataZone. operationId: amazonWebServicesGetFormType tags: - Domains /v2/domains/{domainIdentifier}/glossaries/{identifier}: PATCH: summary: Amazon Web Services Updateglossary description: Updates the business glossary in Amazon DataZone. operationId: amazonWebServicesUpdateGlossary tags: - Domains /v2/domains/{domainIdentifier}/glossary-terms/{identifier}: PATCH: summary: Amazon Web Services Updateglossaryterm description: Updates a business glossary term in Amazon DataZone. operationId: amazonWebServicesUpdateGlossaryTerm tags: - Domains /v2/domains/{domainIdentifier}/listings/{identifier}: GET: summary: Amazon Web Services Getlisting description: '' operationId: amazonWebServicesGetListing tags: - Domains /v2/domains/{domainIdentifier}/projects/{identifier}: PATCH: summary: Amazon Web Services Updateproject description: Updates the specified project in Amazon DataZone. operationId: amazonWebServicesUpdateProject tags: - Domains /v2/domains/{domainIdentifier}/projects/{projectIdentifier}/deleteMembership: POST: summary: Amazon Web Services Deleteprojectmembership description: Deletes project membership in Amazon DataZone. operationId: amazonWebServicesDeleteProjectMembership tags: - Domains /v2/domains/{domainIdentifier}/subscription-grants/{identifier}: GET: summary: Amazon Web Services Getsubscriptiongrant description: Gets the subscription grant in Amazon DataZone. operationId: amazonWebServicesGetSubscriptionGrant tags: - Domains /v2/domains/{domainIdentifier}/subscription-requests/{identifier}: PATCH: summary: Amazon Web Services Updatesubscriptionrequest description: Updates a specified subscription request in Amazon DataZone. operationId: amazonWebServicesUpdateSubscriptionRequest tags: - Domains /v2/domains/{domainIdentifier}/environments/{environmentIdentifier}/subscription-targets/{identifier}: PATCH: summary: Amazon Web Services Updatesubscriptiontarget description: Updates the specified subscription target in Amazon DataZone. operationId: amazonWebServicesUpdateSubscriptionTarget tags: - Domains /v2/domains/{domainIdentifier}/data-source-runs/{identifier}: GET: summary: Amazon Web Services Getdatasourcerun description: Gets an Amazon DataZone data source run. operationId: amazonWebServicesGetDataSourceRun tags: - Domains /v2/domains/{domainIdentifier}/environment-blueprints/{identifier}: GET: summary: Amazon Web Services Getenvironmentblueprint description: Gets an Amazon DataZone blueprint. operationId: amazonWebServicesGetEnvironmentBlueprint tags: - Domains /v2/domains/{domainIdentifier}/group-profiles/{groupIdentifier}: PUT: summary: Amazon Web Services Updategroupprofile description: Updates the specified group profile in Amazon DataZone. operationId: amazonWebServicesUpdateGroupProfile tags: - Domains /v2/domains/{domainIdentifier}/get-portal-login-url: POST: summary: Amazon Web Services Getiamportalloginurl description: Gets the data portal URL for the specified Amazon DataZone domain. operationId: amazonWebServicesGetIamPortalLoginUrl tags: - Domains /v2/domains/{domainIdentifier}/subscriptions/{identifier}: GET: summary: Amazon Web Services Getsubscription description: Gets a subscription in Amazon DataZone. operationId: amazonWebServicesGetSubscription tags: - Domains /v2/domains/{domainIdentifier}/user-profiles/{userIdentifier}: PUT: summary: Amazon Web Services Updateuserprofile description: Updates the specified user profile in Amazon DataZone. operationId: amazonWebServicesUpdateUserProfile tags: - Domains /v2/domains/{domainIdentifier}/data-source-runs/{identifier}/activities: GET: summary: Amazon Web Services Listdatasourcerunactivities description: Lists data source run activities. operationId: amazonWebServicesListDataSourceRunActivities tags: - Domains /v2/domains/{domainIdentifier}/data-sources/{dataSourceIdentifier}/runs: POST: summary: Amazon Web Services Startdatasourcerun description: Start the run of the specified data source in Amazon DataZone. operationId: amazonWebServicesStartDataSourceRun tags: - Domains /v2/domains/{domainIdentifier}/environment-blueprint-configurations: GET: summary: Amazon Web Services Listenvironmentblueprintconfigurations description: Lists blueprint configurations for a Amazon DataZone environment. operationId: amazonWebServicesListEnvironmentBlueprintConfigurations tags: - Domains /v2/domains/{domainIdentifier}/environment-blueprints: GET: summary: Amazon Web Services Listenvironmentblueprints description: Lists blueprints in an Amazon DataZone environment. operationId: amazonWebServicesListEnvironmentBlueprints tags: - Domains /v2/domains/{domainIdentifier}/notifications: GET: summary: Amazon Web Services Listnotifications description: Lists all Amazon DataZone notifications. operationId: amazonWebServicesListNotifications tags: - Domains /v2/domains/{domainIdentifier}/projects/{projectIdentifier}/memberships: GET: summary: Amazon Web Services Listprojectmemberships description: Lists all members of the specified project. operationId: amazonWebServicesListProjectMemberships tags: - Domains /v2/domains/{domainIdentifier}/subscriptions: GET: summary: Amazon Web Services Listsubscriptions description: Lists subscriptions in Amazon DataZone. operationId: amazonWebServicesListSubscriptions tags: - Domains /v2/domains/{domainIdentifier}/assets/{identifier}/reject-predictions: PUT: summary: Amazon Web Services Rejectpredictions description: Rejects automatically generated business-friendly metadata for your Amazon DataZone assets. operationId: amazonWebServicesRejectPredictions tags: - Domains /v2/domains/{domainIdentifier}/subscription-requests/{identifier}/reject: PUT: summary: Amazon Web Services Rejectsubscriptionrequest description: Rejects the specified subscription request. operationId: amazonWebServicesRejectSubscriptionRequest tags: - Domains /v2/domains/{domainIdentifier}/subscriptions/{identifier}/revoke: PUT: summary: Amazon Web Services Revokesubscription description: Revokes a specified subscription in Amazon DataZone. operationId: amazonWebServicesRevokeSubscription tags: - Domains /v2/domains/{domainIdentifier}/search: POST: summary: Amazon Web Services Search description: Searches for assets in Amazon DataZone. operationId: amazonWebServicesSearch tags: - Domains /v2/domains/{domainIdentifier}/search-group-profiles: POST: summary: Amazon Web Services Searchgroupprofiles description: Searches group profiles in Amazon DataZone. operationId: amazonWebServicesSearchGroupProfiles tags: - Domains /v2/domains/{domainIdentifier}/listings/search: POST: summary: Amazon Web Services Searchlistings description: Searches listings in Amazon DataZone. operationId: amazonWebServicesSearchListings tags: - Domains /v2/domains/{domainIdentifier}/types-search: POST: summary: Amazon Web Services Searchtypes description: Searches for types in Amazon DataZone. operationId: amazonWebServicesSearchTypes tags: - Domains /v2/domains/{domainIdentifier}/search-user-profiles: POST: summary: Amazon Web Services Searchuserprofiles description: Searches user profiles in Amazon DataZone. operationId: amazonWebServicesSearchUserProfiles tags: - Domains /v2/domains/{domainIdentifier}/subscription-grants/{identifier}/status/{assetIdentifier}: PATCH: summary: Amazon Web Services Updatesubscriptiongrantstatus description: Updates the status of the specified subscription grant status in Amazon DataZone. operationId: amazonWebServicesUpdateSubscriptionGrantStatus tags: - Domains