# Amazon Verified Permissions API

> Amazon Verified Permissions API on Apizie: 24 endpoints (Creates a reference to an Amazon Cognito user pool as an external identity provider (IdP). After you create…, Creates a Cedar policy and saves it in the specified policy store. You can create either a static policy or…, Creates a policy store. A policy store is a container for policy resources. Although Cedar supports multiple…, Creates a policy template. A template can use placeholders for the principal and resource. A template must…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-verifiedpermissions`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://apizie.tech/api/cloud/amazonaws-verifiedpermissions
- OpenAPI: https://apizie.tech/api/cloud/amazonaws-verifiedpermissions/openapi.json

Amazon Verified Permissions is a permissions management service from Amazon Web Services. You can use Verified Permissions to manage permissions for your application, and authorize user access based on those…

## Endpoints

### Creates a reference to an Amazon Cognito user pool as an external identity provider (IdP). After you create…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/create-identity-source` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates a Cedar policy and saves it in the specified policy store. You can create either a static policy or…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/create-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates a policy store. A policy store is a container for policy resources. Although Cedar supports multiple…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/create-policy-store` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates a policy template. A template can use placeholders for the principal and resource. A template must…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/create-policy-template` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes an identity source that references an identity provider (IdP) such as Amazon Cognito. After you…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/delete-identity-source` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes the specified policy from the policy store. This operation is idempotent; if you specify a policy…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/delete-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes the specified policy store. This operation is idempotent. If you specify a policy store that does…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/delete-policy-store` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes the specified policy template from the policy store. This operation also deletes any policies that…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/delete-policy-template` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves the details about the specified identity source.
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/get-identity-source` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves information about the specified policy.
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/get-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves details about a policy store.
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/get-policy-store` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieve the details for the specified policy template in the specified policy store.
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/get-policy-template` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieve the details for the specified schema in the specified policy store.
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/get-schema` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Makes an authorization decision about a service request described in the parameters. The information in the…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/is-authorized` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Makes an authorization decision about a service request described in the parameters. The principal in this…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/is-authorized-with-token` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns a paginated list of all of the identity sources defined in the specified policy store.
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/list-identity-sources` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | string | no | Pagination limit |
| nextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns a paginated list of all policies stored in the specified policy store.
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/list-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | string | no | Pagination limit |
| nextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns a paginated list of all policy stores in the calling Amazon Web Services account.
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/list-policy-stores` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | string | no | Pagination limit |
| nextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns a paginated list of all policy templates in the specified policy store.
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/list-policy-templates` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | string | no | Pagination limit |
| nextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Creates or updates the policy schema in the specified policy store. The schema is used to validate any Cedar…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/put-schema` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Updates the specified identity source to use a new identity provider (IdP) source, or to change the mapping…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/update-identity-source` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Modifies a Cedar static policy in the specified policy store. You can change only certain elements of the…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/update-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Modifies the validation setting for a policy store.
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/update-policy-store` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Updates the specified policy template. You can update only the description and the some elements of the…
`POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/update-policy-template` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

## Example
```
curl "https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/create-identity-source" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Amazon Verified Permissions API?
Create a free Apizie key, then send POST https://apizie.tech/v1/cloud:amazonaws-verifiedpermissions/create-identity-source with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Amazon Verified Permissions API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Amazon Verified Permissions itself also needs your own key from amazonaws.com.

### Can AI agents use the Amazon Verified Permissions API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-verifiedpermissions.

### What is the status of the Amazon Verified Permissions API?
Needs your own provider key (bring your own key)