apigateway:POST

Write

apigateway:POST is a Write access-level action in the apigateway service. Grants permission to create a particular resource

Resource types

ARNs that apigateway:POST can be scoped to in an IAM policy.

arn:${Partition}:apigateway:${Region}::/apikeys
ApiKeys
arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName}/apimappings
ApiMappings
arn:${Partition}:apigateway:${Region}::/apis
Apis
arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/authorizers
Authorizers
arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/authorizers
Authorizers
arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName}/basepathmappings
BasePathMappings
arn:${Partition}:apigateway:${Region}::/clientcertificates
ClientCertificates
arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/deployments
Deployments
arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/deployments
Deployments
arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/documentation/parts
DocumentationParts
arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/documentation/versions
DocumentationVersions
arn:${Partition}:apigateway:${Region}:${Account}:/domainnameaccessassociations
DomainNameAccessAssociations
arn:${Partition}:apigateway:${Region}::/domainnames
DomainNames
arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/gatewayresponses
GatewayResponses
arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/integrations/${IntegrationId}/integrationresponses/${IntegrationResponseId}
IntegrationResponse
arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/resources/${ResourceId}/methods/${HttpMethodType}/integration/responses/${StatusCode}
IntegrationResponse
arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/integrations/${IntegrationId}/integrationresponses
IntegrationResponses
arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/integrations
Integrations
arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/resources/${ResourceId}/methods/${HttpMethodType}/responses/${StatusCode}
MethodResponse
arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/models
Models
arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/models
Models
arn:${Partition}:apigateway:${Region}::/domainnames/${DomainName}+${DomainIdentifier}/basepathmappings
PrivateBasePathMappings
arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/requestvalidators
RequestValidators
arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/resources
Resources
arn:${Partition}:apigateway:${Region}::/restapis
RestApis
arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/routes/${RouteId}/routeresponses
RouteResponses
arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/routes
Routes
arn:${Partition}:apigateway:${Region}::/apis/${ApiId}/stages
Stages
arn:${Partition}:apigateway:${Region}::/restapis/${RestApiId}/stages
Stages
arn:${Partition}:apigateway:${Region}::/usageplans/${UsagePlanId}/keys
UsagePlanKeys
arn:${Partition}:apigateway:${Region}::/usageplans
UsagePlans
arn:${Partition}:apigateway:${Region}::/vpclinks
VpcLinks

Condition keys

Keys you can use in the Condition block of a policy that grants apigateway:POST.

aws:RequestTag/${TagKey} String

Filters access by the presence of tag key-value pairs in the request

aws:TagKeys ArrayOfString

Filters access by the presence of tag keys in the request

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

apigateway:Request/ApiKeyRequired ArrayOfBool

Filters access by the requirement of API. Available during the CreateRoute and UpdateRoute operations. Also available as a collection during import and reimport

apigateway:Request/ApiName String

Filters access by API name. Available during the CreateApi and UpdateApi operations

apigateway:Request/AuthorizerType ArrayOfString

Filters access by type of authorizer in the request, for example REQUEST or JWT. Available during CreateAuthorizer and UpdateAuthorizer. Also available during import and reimport as an ArrayOfString

apigateway:Request/AuthorizerUri ArrayOfString

Filters access by URI of a Lambda authorizer function. Available during CreateAuthorizer and UpdateAuthorizer. Also available during import and reimport as an ArrayOfString

apigateway:Request/DisableExecuteApiEndpoint Bool

Filters access by status of the default execute-api endpoint. Available during the CreateApi and UpdateApi operations

apigateway:Request/EndpointType ArrayOfString

Filters access by endpoint type. Available during the CreateDomainName, UpdateDomainName, CreateApi, and UpdateApi operations

apigateway:Request/RouteAuthorizationType ArrayOfString

Filters access by authorization type, for example NONE, AWS_IAM, CUSTOM, JWT. Available during the CreateRoute and UpdateRoute operations. Also available as a collection during import

apigateway:Request/StageName String

Filters access by stage name of the deployment that you attempt to create. Available during the CreateDeployment operation

apigateway:Request/AccessAssociationSource String

Filters access by access association source. Available during the CreateDomainNameAccessAssociation operation

apigateway:Request/DomainNameArn ARN

Filters access by domain name ARN. Available during the CreateDomainNameAccessAssociation operation

apigateway:Request/MtlsTrustStoreUri String

Filters access by URI of the truststore used for mutual TLS authentication. Available during the CreateDomainName and UpdateDomainName operations

apigateway:Request/MtlsTrustStoreVersion String

Filters access by version of the truststore used for mutual TLS authentication. Available during the CreateDomainName and UpdateDomainName operations

apigateway:Request/SecurityPolicy ArrayOfString

Filters access by TLS version. Available during the CreateDomain and UpdateDomain operations

apigateway:Resource/RoutingMode String

Filters access by routing mode of the existing domain name. Available during the UpdateDomainName and DeleteDomainName operations

apigateway:Request/AccessLoggingDestination String

Filters access by access log destination. Available during the CreateStage and UpdateStage operations

apigateway:Request/AccessLoggingFormat String

Filters access by access log format. Available during the CreateStage and UpdateStage operations

Example IAM policy

A minimal policy that allows apigateway:POST. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowApigatewayPOST",
      "Effect": "Allow",
      "Action": "apigateway:POST",
      "Resource": "*"
    }
  ]
}

Related actions in apigateway

View all apigateway actions →