IAM

IAM

Overview

Provides an Application Programming Interface (API) that supports programmatic use of IaaS/PaaS products provided by SCP.

This guide provides a brief description of IAM service and how to call API. The API is provided as a RESTful API, and it responds in JSON format.

Version

Deprecated versions with Not Before dates that have arrived or expired are no longer supported. We recommend using the latest version.

VersionStatusNot Before
1.4CURRENT-
1.3SUPPORTED20261130
1.2SUPPORTED20260930
1.1DEPRECATED20260531
1.0DEPRECATED20260223

OpenAPI URL

https://iam.{environment}.samsungsdscloud.com

Environment and Region List

environmentregion
skr-west1
skr-east1
gkr-south1
gkr-south2
gkr-south3
ekr-west1
ekr-east1

API Version History

1.4

IAM has been updated to version 1.4.

Changes

  • [Changed] GET /iam/1.4/groups/{group_id}/members - Group Member list API has been changed.
    • Response schema: GroupMemberPageResponseGroupMemberPageResponseV1Dot4
  • [Changed] GET /iam/1.4/accounts/{account_id}/users/{user_id} - Get IAM users API has been changed.
    • Response schema: IAMUserDetailResponseIAMUserDetailResponseV1Dot4
    • Response fields added: [‘access_keys’]
  • [Changed] GET /iam/1.4/accounts/{account_id}/users - List IAM users API has been changed.
    • Response schema: ListIAMUserResponseListIAMUserResponseV1Dot4
  • [Changed] GET /iam/1.4/policies/{policy_id}/bindings - Get a specific policy binding list API has been changed.
    • Response schema: PolicyBindingPageResponsePolicyBindingPageResponseV1Dot4

1.3

IAM has been updated to version 1.3.

Changes

  • [Changed] POST /iam/1.3/roles - Create role API has been changed.
    • Request schema: RoleCreateRequestRoleCreateRequestV1Dot3
    • Request fields added: [‘role_type’]

1.2

IAM has been updated to version 1.2.

Changes

No changes in this version.

1.1

IAM has been updated to version 1.1.

Changes

  • [New] DELETE /iam/1.1/accounts/{account_id}/users/{user_id} - Delete IAM user API has been added.

1.0

IAM version 1.0 has been released.

Changes

  • [New] GET /iam/1.0/access-keys - List access keys API has been added.
  • [New] POST /iam/1.0/access-keys - Create an access key API has been added.
  • [New] DELETE /iam/1.0/access-keys/bulk - Remove the access keys API has been added.
  • [New] POST /iam/1.0/access-keys/send-otp - Send Temporary Access Key OTP API has been added.
  • [New] DELETE /iam/1.0/access-keys/{access_key_id} - Remove the access key API has been added.
  • [New] GET /iam/1.0/access-keys/{access_key_id} - Get an access key API has been added.
  • [New] PUT /iam/1.0/access-keys/{access_key_id} - Set an access key API has been added.
  • [New] GET /iam/1.0/accounts/{account_id}/users - List IAM users API has been added.
  • [New] POST /iam/1.0/accounts/{account_id}/users - Create IAM user API has been added.
  • [New] DELETE /iam/1.0/accounts/{account_id}/users/bulk - Delete IAM users API has been added.
  • [New] GET /iam/1.0/accounts/{account_id}/users/{user_id} - Get IAM users API has been added.
  • [New] PUT /iam/1.0/accounts/{account_id}/users/{user_id} - Update IAM user API has been added.
  • [New] PUT /iam/1.0/accounts/{account_id}/users/{user_id}/password - Update IAM user password API has been added.
  • [New] GET /iam/1.0/endpoints - Get endpoint list API has been added.
  • [New] GET /iam/1.0/groups - List Groups API has been added.
  • [New] POST /iam/1.0/groups - Create a group API has been added.
  • [New] DELETE /iam/1.0/groups/{group_id} - Remove the Group API has been added.
  • [New] GET /iam/1.0/groups/{group_id} - Get a Group API has been added.
  • [New] PUT /iam/1.0/groups/{group_id} - Modify a Group API has been added.
  • [New] GET /iam/1.0/groups/{group_id}/members - Group Member list API has been added.
  • [New] POST /iam/1.0/groups/{group_id}/members - Add a user to a group API has been added.
  • [New] DELETE /iam/1.0/groups/{group_id}/members/{user_id} - Remove a User from a Group API has been added.
  • [New] GET /iam/1.0/groups/{group_id}/policy-bindings - Show group policy API has been added.
  • [New] POST /iam/1.0/groups/{group_id}/policy-bindings - Assign policies to the group API has been added.
  • [New] DELETE /iam/1.0/groups/{group_id}/policy-bindings/{policy_id} - Remove policy assignment from group API has been added.
  • [New] GET /iam/1.0/policies - Get policy list API has been added.
  • [New] POST /iam/1.0/policies - Create a policy API has been added.
  • [New] DELETE /iam/1.0/policies/bulk - Remove policies API has been added.
  • [New] POST /iam/1.0/policies/list - Query policy list API has been added.
  • [New] DELETE /iam/1.0/policies/{policy_id} - Delete the policy API has been added.
  • [New] GET /iam/1.0/policies/{policy_id} - Show the policy API has been added.
  • [New] PUT /iam/1.0/policies/{policy_id} - Set the policy API has been added.
  • [New] GET /iam/1.0/policies/{policy_id}/bindings - Get a specific policy binding list API has been added.
  • [New] PUT /iam/1.0/policies/{policy_id}/bindings - Set the policy group binding API has been added.
  • [New] DELETE /iam/1.0/resource-policies/{srn} - Delete the resource based policy API has been added.
  • [New] GET /iam/1.0/resource-policies/{srn} - Show the resource based policy API has been added.
  • [New] PUT /iam/1.0/resource-policies/{srn} - Set the resource based policy API has been added.
  • [New] POST /iam/1.0/resource-policies/{srn}/statements - Add a permission into the resource based policy API has been added.
  • [New] DELETE /iam/1.0/resource-policies/{srn}/statements/{sid} - Remove a permission into the resource based policy API has been added.
  • [New] PUT /iam/1.0/resource-policies/{srn}/statements/{sid} - Set a permission into the resource based policy API has been added.
  • [New] GET /iam/1.0/roles - Get role list API has been added.
  • [New] POST /iam/1.0/roles - Create role API has been added.
  • [New] DELETE /iam/1.0/roles/bulk - Delete bulk role API has been added.
  • [New] DELETE /iam/1.0/roles/{role_id} - Delete role API has been added.
  • [New] GET /iam/1.0/roles/{role_id} - Get role API has been added.
  • [New] PUT /iam/1.0/roles/{role_id} - Set role API has been added.
  • [New] DELETE /iam/1.0/roles/{role_id}/policy-bindings - Detach policies to Role API has been added.
  • [New] GET /iam/1.0/roles/{role_id}/policy-bindings - Get Role Policy-Binding list API has been added.
  • [New] POST /iam/1.0/roles/{role_id}/policy-bindings - Attach policies to Role API has been added.
  • [New] DELETE /iam/1.0/roles/{role_id}/policy-bindings/{policy_id} - Detach policy to Role API has been added.
  • [New] PUT /iam/1.0/roles/{role_id}/trust-policy - Set role trust policy API has been added.
  • [New] GET /iam/1.0/saml-providers - List saml providers API has been added.
  • [New] POST /iam/1.0/saml-providers - Create a saml provider API has been added.
  • [New] DELETE /iam/1.0/saml-providers/bulk - Remove saml providers API has been added.
  • [New] GET /iam/1.0/saml-providers/{saml_provider_id} - Get saml provider information API has been added.
  • [New] PUT /iam/1.0/saml-providers/{saml_provider_id} - Update saml provider information API has been added.
  • [New] GET /iam/1.0/service-accounts - List service accounts API has been added.
  • [New] GET /iam/1.0/service-accounts/{service_account_id} - Get service account API has been added.
  • [New] GET /iam/1.0/users/{user_id}/policy-bindings - Get user policy-binding list API has been added.
  • [New] POST /iam/1.0/users/{user_id}/policy-bindings - Assign policies to user API has been added.
  • [New] DELETE /iam/1.0/users/{user_id}/policy-bindings/{policy_id} - Delete user policy API has been added.