# IAM Roles Anywhere API

> IAM Roles Anywhere API on Apizie: 28 endpoints (Lists all profiles in the authenticated account and Amazon Web Services Region. Required permissions:…, Creates a profile , a list of the roles that Roles Anywhere service is trusted to assume. You use profiles…, Lists the trust anchors in the authenticated account and Amazon Web Services Region. Required permissions:…, Creates a trust anchor to establish trust between IAM Roles Anywhere and your certificate authority (CA).…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-rolesanywhere`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://apizie.tech/api/cloud/amazonaws-rolesanywhere
- OpenAPI: https://apizie.tech/api/cloud/amazonaws-rolesanywhere/openapi.json

Identity and Access Management Roles Anywhere provides a secure way for your workloads such as servers, containers, and applications that run outside of Amazon Web Services to obtain temporary Amazon Web Services…

## Endpoints

### Lists all profiles in the authenticated account and Amazon Web Services Region. Required permissions:…
`GET https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/list-profiles` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| nextToken | string | no | A token that indicates where the output should continue from, if a previous request did not show all results. To get the next results,… |
| pageSize | integer | no | The number of resources in the paginated list. |

### Creates a profile , a list of the roles that Roles Anywhere service is trusted to assume. You use profiles…
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/create-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Lists the trust anchors in the authenticated account and Amazon Web Services Region. Required permissions:…
`GET https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/list-trust-anchors` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| nextToken | string | no | A token that indicates where the output should continue from, if a previous request did not show all results. To get the next results,… |
| pageSize | integer | no | The number of resources in the paginated list. |

### Creates a trust anchor to establish trust between IAM Roles Anywhere and your certificate authority (CA).…
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/create-trust-anchor` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Gets a certificate revocation list (CRL). Required permissions: rolesanywhere:GetCrl .
`GET https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/get-crl` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| crlId | string | yes | The unique identifier of the certificate revocation list (CRL). |

### Updates the certificate revocation list (CRL). A CRL is a list of certificates that have been revoked by the…
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/update-crl` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| crlId | string | yes | The unique identifier of the certificate revocation list (CRL). |
| body | object | yes | JSON request body |

### Deletes a certificate revocation list (CRL). Required permissions: rolesanywhere:DeleteCrl .
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/delete-crl` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| crlId | string | yes | The unique identifier of the certificate revocation list (CRL). |

### Gets a profile. Required permissions: rolesanywhere:GetProfile .
`GET https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/get-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| profileId | string | yes | The unique identifier of the profile. |

### Updates a profile , a list of the roles that IAM Roles Anywhere service is trusted to assume. You use…
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/update-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| profileId | string | yes | The unique identifier of the profile. |
| body | object | yes | JSON request body |

### Deletes a profile. Required permissions: rolesanywhere:DeleteProfile .
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/delete-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| profileId | string | yes | The unique identifier of the profile. |

### Gets a trust anchor. Required permissions: rolesanywhere:GetTrustAnchor .
`GET https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/get-trust-anchor` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| trustAnchorId | string | yes | The unique identifier of the trust anchor. |

### Updates a trust anchor. You establish trust between IAM Roles Anywhere and your certificate authority (CA)…
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/update-trust-anchor` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| trustAnchorId | string | yes | The unique identifier of the trust anchor. |
| body | object | yes | JSON request body |

### Deletes a trust anchor. Required permissions: rolesanywhere:DeleteTrustAnchor .
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/delete-trust-anchor` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| trustAnchorId | string | yes | The unique identifier of the trust anchor. |

### Disables a certificate revocation list (CRL). Required permissions: rolesanywhere:DisableCrl .
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/disable-crl` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| crlId | string | yes | The unique identifier of the certificate revocation list (CRL). |

### Disables a profile. When disabled, temporary credential requests with this profile fail. Required…
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/disable-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| profileId | string | yes | The unique identifier of the profile. |

### Disables a trust anchor. When disabled, temporary credential requests specifying this trust anchor are…
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/disable-trust-anchor` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| trustAnchorId | string | yes | The unique identifier of the trust anchor. |

### Enables a certificate revocation list (CRL). When enabled, certificates stored in the CRL are unauthorized…
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/enable-crl` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| crlId | string | yes | The unique identifier of the certificate revocation list (CRL). |

### Enables temporary credential requests for a profile. Required permissions: rolesanywhere:EnableProfile .
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/enable-profile` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| profileId | string | yes | The unique identifier of the profile. |

### Enables a trust anchor. When enabled, certificates in the trust anchor chain are authorized for trust…
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/enable-trust-anchor` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| trustAnchorId | string | yes | The unique identifier of the trust anchor. |

### Gets a subject , which associates a certificate identity with authentication attempts. The subject stores…
`GET https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/get-subject` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| subjectId | string | yes | The unique identifier of the subject. |

### Lists all certificate revocation lists (CRL) in the authenticated account and Amazon Web Services Region.…
`GET https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/list-crls` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| nextToken | string | no | A token that indicates where the output should continue from, if a previous request did not show all results. To get the next results,… |
| pageSize | integer | no | The number of resources in the paginated list. |

### Imports the certificate revocation list (CRL). A CRL is a list of certificates that have been revoked by the…
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/import-crl` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Lists the subjects in the authenticated account and Amazon Web Services Region. Required permissions:…
`GET https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/list-subjects` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| nextToken | string | no | A token that indicates where the output should continue from, if a previous request did not show all results. To get the next results,… |
| pageSize | integer | no | The number of resources in the paginated list. |

### Lists the tags attached to the resource. Required permissions: rolesanywhere:ListTagsForResource .
`GET https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/list-tags-for-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The ARN of the resource. |

### Attaches a list of notification settings to a trust anchor. A notification setting includes information such…
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/put-notification-settings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Resets the custom notification setting to IAM Roles Anywhere default setting. Required permissions:…
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/reset-notification-settings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Attaches tags to a resource. Required permissions: rolesanywhere:TagResource .
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/tag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Removes tags from the resource. Required permissions: rolesanywhere:UntagResource .
`POST https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/untag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

## Example
```
curl "https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/list-profiles" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the IAM Roles Anywhere API?
Create a free Apizie key, then send GET https://apizie.tech/v1/cloud:amazonaws-rolesanywhere/list-profiles with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the IAM Roles Anywhere API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. IAM Roles Anywhere itself also needs your own key from amazonaws.com.

### Can AI agents use the IAM Roles Anywhere API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-rolesanywhere.

### What is the status of the IAM Roles Anywhere API?
Needs your own provider key (bring your own key)