apigateway:GET is a Read access-level action in the apigateway service. Grants permission to read a particular resource
ARNs that apigateway:GET can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants apigateway:GET.
Filters access by tag key-value pairs attached to the resource
Filters access by the requirement of API. Available during the CreateRoute and UpdateRoute operations. Also available as a collection during import and reimport
Filters access by API name. Available during the CreateApi and UpdateApi operations
Filters access by type of authorizer in the request, for example REQUEST or JWT. Available during CreateAuthorizer and UpdateAuthorizer. Also available during import and reimport as an ArrayOfString
Filters access by URI of a Lambda authorizer function. Available during CreateAuthorizer and UpdateAuthorizer. Also available during import and reimport as an ArrayOfString
Filters access by status of the default execute-api endpoint. Available during the CreateApi and UpdateApi operations
Filters access by endpoint type. Available during the CreateDomainName, UpdateDomainName, CreateApi, and UpdateApi operations
Filters access by authorization type, for example NONE, AWS_IAM, CUSTOM, JWT. Available during the CreateRoute and UpdateRoute operations. Also available as a collection during import
Filters access by the requirement of API key for the existing Route resource. Available during the UpdateRoute and DeleteRoute operations. Also available as a collection during reimport
Filters access by API name. Available during the UpdateApi and DeleteApi operations
Filters access by the current type of authorizer, for example REQUEST or JWT. Available during UpdateAuthorizer and DeleteAuthorizer operations. Also available during import and reimport as an ArrayOfString
Filters access by the URI of the current Lambda authorizer associated with the current API. Available during UpdateAuthorizer and DeleteAuthorizer. Also available as a collection during reimport
Filters access by status of the default execute-api endpoint. Available during the UpdateApi and DeleteApi operations
Filters access by endpoint type. Available during the UpdateDomainName, DeleteDomainName, UpdateApi, and DeleteApi operations
Filters access by authorization type of the existing Route resource, for example NONE, AWS_IAM, CUSTOM. Available during the UpdateRoute and DeleteRoute operations. Also available as a collection during reimport
Filters access by stage name of the deployment that you attempt to create. Available during the CreateDeployment operation
Filters access by URI of the truststore used for mutual TLS authentication. Available during the CreateDomainName and UpdateDomainName operations
Filters access by version of the truststore used for mutual TLS authentication. Available during the CreateDomainName and UpdateDomainName operations
Filters access by TLS version. Available during the CreateDomain and UpdateDomain operations
Filters access by URI of the truststore used for mutual TLS authentication. Available during the UpdateDomainName and DeleteDomainName operations
Filters access by version of the truststore used for mutual TLS authentication. Available during the UpdateDomainName and DeleteDomainName operations
Filters access by routing mode of the existing domain name. Available during the UpdateDomainName and DeleteDomainName operations
Filters access by TLS version. Available during the UpdateDomainName and DeleteDomainName operations
Filters access by access association source. Available during the CreateDomainNameAccessAssociation operation
Filters access by domain name ARN. Available during the CreateDomainNameAccessAssociation operation
Filters access by access log destination. Available during the CreateStage and UpdateStage operations
Filters access by access log format. Available during the CreateStage and UpdateStage operations
Filters access by access log destination of the current Stage resource. Available during the UpdateStage and DeleteStage operations
Filters access by access log format of the current Stage resource. Available during the UpdateStage and DeleteStage operations
A minimal policy that allows apigateway:GET. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowApigatewayGET",
"Effect": "Allow",
"Action": "apigateway:GET",
"Resource": "*"
}
]
}