Record a review decision on a single access grant. Send only the fields you want to change. Each accepted request updates the current review state and appends an entry to the grant’s review history.
The decision on this grant. keep accepts it, remove marks it for revocation, review_later defers it, and trust_until_review trusts it until nextReviewAt. Send null to clear it.
trust_until_review is the only decision that changes classification. It requires nextReviewAt, which must be in the future and no more than 366 days ahead, and it sets trustStatus to trusted and trustedUntil to that date. Sending it without a usable date returns a 400. Plerion records a digest of the grant's actions, conditions and resource scope at that moment; if the grant is later widened, trust ends early, reviewDecision and nextReviewAt are cleared, and trustLapseReason becomes content_changed. Extending the review date on a grant whose permissions changed since it was trusted returns a 400.
Available options: keep, remove, review_later, trust_until_review
When this grant should next be reviewed, as an ISO 8601 date-time string. Required when reviewDecision is trust_until_review, where it also sets the end of the trust window.
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Plerion, Simplify Cloud Security - documentation","description":"Plerion, Simplify Cloud Security - documentation","colors":{"primary":"#FFA500","light":"#07C983","dark":"#15803D"},"logo":{"light":"https://mintcdn.com/pleriondocs/GIwfwlVd5Zt2w0-r/logo/plerion.svg?fit=max\u0026auto=format\u0026n=GIwfwlVd5Zt2w0-r\u0026q=85\u0026s=86e89d26c3b52a61495baaf98faff52c","dark":"https://mintcdn.com/pleriondocs/GIwfwlVd5Zt2w0-r/logo/plerion.svg?fit=max\u0026auto=format\u0026n=GIwfwlVd5Zt2w0-r\u0026q=85\u0026s=86e89d26c3b52a61495baaf98faff52c"},"favicon":"https://mintcdn.com/pleriondocs/tawzAAKnRc9yNNhT/favicon.svg?fit=max\u0026auto=format\u0026n=tawzAAKnRc9yNNhT\u0026q=85\u0026s=43160b812d8a7d732e3a72cf166dbbec","navbar":{"primary":{"type":"button","label":"Dashboard","href":"https://app.plerion.com/sign-in"}},"footer":{"socials":{"x":"https://x.com/plerionhq","linkedin":"https://www.linkedin.com/company/plerion"},"links":[{"header":"Company","items":[{"label":"Plerion","href":"https://www.plerion.com"},{"label":"Contact","href":"https://www.plerion.com/company/contact-us"},{"label":"Partnerships","href":"https://www.plerion.com/company/partnerships"}]},{"header":"Resources","items":[{"label":"Blog","href":"https://www.plerion.com/blog"},{"label":"Trust center","href":"https://trust.plerion.com/"},{"label":"Privacy policy","href":"https://www.plerion.com/company/privacy-policy"}]}]},"search":{"prompt":"Search the docs"},"icons":{"library":"fontawesome"},"styling":{"eyebrows":"breadcrumbs","codeblocks":"system","latex":false},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"pleriondocs","hasAudioNarration":false,"actualSubdomain":"pleriondocs","customDomains":["docs.plerion.com"],"gitSource":{"type":"github","owner":"plerionhq","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6aec8970981b8170d4f236e3","collectionId":"a029f19c-705e-43ab-b1af-ba76bab963d7","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6aec8970981b8170d4f236e3"},"feedback":{"thumbs":true},"entitlements":{},"buildId":"6aec8970981b8170d4f236e3","clientVersion":"0.0.4067","searchFilterCounts":[{"language":"default","tag":"API reference","count":124},{"language":"default","tag":"Guides","count":121},{"language":"default","tag":"API documentation","count":82},{"language":"default","tag":"Integrations","count":72},{"language":"default","tag":"Cloud","count":48},{"language":"default","tag":"Platform","count":38},{"language":"default","tag":"CLI reference","count":24},{"language":"default","tag":"Ownership","count":22},{"language":"default","tag":"AWS","count":21},{"language":"default","tag":"Organization API","count":21}]},"assistantConfig":{},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"api-reference/aws-access-grants/update","slug":"/api-reference/aws-access-grants/update","pageMetadata":{"title":"Review an AWS access grant","description":"Record a review decision on a single access grant. Send only the fields you want to change. Each accepted request updates the current review state and appends an entry to the grant's review history.","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml patch /v1/tenant/aws/access-grants/{id}","href":"/api-reference/aws-access-grants/update","autogeneratedByOpenApi":true},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Record a review decision on a single access grant. Send only the fields you want to change. Each accepted request updates the current review state and appends an entry to the grant’s review history.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"codeStyling":"system","config":{},"pageMetadata":{"title":"Review an AWS access grant","description":"Record a review decision on a single access grant. Send only the fields you want to change. Each accepted request updates the current review state and appends an entry to the grant's review history.","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml patch /v1/tenant/aws/access-grants/{id}","href":"/api-reference/aws-access-grants/update","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"operationId":"updateTenantAccessGrant","tags":["AWS access grants"],"summary":"Update","x-mint":{"metadata":{"title":"Review an AWS access grant"}},"description":"Record a review decision on a single access grant. Send only the fields you want to change. Each accepted request updates the current review state and appends an entry to the grant's review history.","security":["7221b03a-1c7f-493e-bd52-0d5867c0fe21"],"parameters":["99085d94-8452-4d1d-a112-68467634ef6e","8f7d1d4a-d248-433f-b4bb-474ffcd23f5c","0e3f85ee-a4dd-4bab-9933-aa7e55f2aa96"],"requestBody":"4bd038e1-bcb4-4190-bda2-73aca87d3b4e","responses":{"200":"7607a232-08db-4e8d-b379-835c2f90b3b8","400":"72c6d387-b5f2-4a56-b9bb-22e7f63b89ec","404":"345a5eb5-bbfe-4037-9f20-f5710c7b0ddb","500":"4eadf5f7-4032-4153-b72c-d990bf90edaf"},"method":"patch","type":"path","servers":["261340cd-c547-4350-bc6e-f80804ae395f"],"path":"/v1/tenant/aws/access-grants/{id}","baseUrlOptions":["https://{region}.api.plerion.com"],"title":"Update","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"99085d94-8452-4d1d-a112-68467634ef6e":{"name":"Authorization","in":"header","description":"Bearer API Key. For example, \"Bearer {Tenant API Key}\"","required":true,"schema":{"type":"string","isRequired":true,"description":"Bearer API Key. For example, \"Bearer {Tenant API Key}\"","uniqueKey":"","typeLabel":"string"}},"8f7d1d4a-d248-433f-b4bb-474ffcd23f5c":{"in":"header","name":"Content-Type","description":"application/json","required":true,"schema":{"type":"string","isRequired":true,"description":"application/json","uniqueKey":"","typeLabel":"string"}},"0e3f85ee-a4dd-4bab-9933-aa7e55f2aa96":{"in":"path","name":"id","required":true,"description":"The ID of the access grant.","schema":{"type":"string","isRequired":true,"description":"The ID of the access grant.","uniqueKey":"","typeLabel":"string"},"example":"0f9a1c3e-5b7d-4c21-9e8f-2a6b4d10c7f3"}},"requestBody":{"required":true,"description":"Include at least one review field, or the request returns a `400`. Send `null` to clear a field.","content":{"application/json":{"schema":{"type":"object","properties":{"reviewDecision":{"oneOf":[{"description":"The decision on this grant. `keep` accepts it, `remove` marks it for revocation, `review_later` defers it, and `trust_until_review` trusts it until `nextReviewAt`. Send null to clear it.\n\n`trust_until_review` is the only decision that changes classification. It requires `nextReviewAt`, which must be in the future and no more than 366 days ahead, and it sets `trustStatus` to `trusted` and `trustedUntil` to that date. Sending it without a usable date returns a `400`. Plerion records a digest of the grant's actions, conditions and resource scope at that moment; if the grant is later widened, trust ends early, `reviewDecision` and `nextReviewAt` are cleared, and `trustLapseReason` becomes `content_changed`. Extending the review date on a grant whose permissions changed since it was trusted returns a `400`.\n\nAvailable options: `keep`, `remove`, `review_later`, `trust_until_review`","type":"string","example":"keep","uniqueKey":"reviewDecision.oneOf.0","typeLabel":"string"},{"description":"The decision on this grant. `keep` accepts it, `remove` marks it for revocation, `review_later` defers it, and `trust_until_review` trusts it until `nextReviewAt`. Send null to clear it.\n\n`trust_until_review` is the only decision that changes classification. It requires `nextReviewAt`, which must be in the future and no more than 366 days ahead, and it sets `trustStatus` to `trusted` and `trustedUntil` to that date. Sending it without a usable date returns a `400`. Plerion records a digest of the grant's actions, conditions and resource scope at that moment; if the grant is later widened, trust ends early, `reviewDecision` and `nextReviewAt` are cleared, and `trustLapseReason` becomes `content_changed`. Extending the review date on a grant whose permissions changed since it was trusted returns a `400`.\n\nAvailable options: `keep`, `remove`, `review_later`, `trust_until_review`","type":"null","example":"keep","uniqueKey":"reviewDecision.oneOf.1","typeLabel":"null"}],"uniqueKey":"reviewDecision","typeLabel":"string | null"},"reviewComment":{"oneOf":[{"description":"Free-text note explaining the decision. Maximum 2000 characters.","type":"string","maxLength":2000,"example":"Vendor export feed, contract renewed 2026-07","uniqueKey":"reviewComment.oneOf.0","typeLabel":"string"},{"description":"Free-text note explaining the decision. Maximum 2000 characters.","type":"null","maxLength":2000,"example":"Vendor export feed, contract renewed 2026-07","uniqueKey":"reviewComment.oneOf.1","typeLabel":"null"}],"uniqueKey":"reviewComment","typeLabel":"string | null"},"grantee":{"oneOf":[{"description":"Free-text grantee for this grant, in whatever form your organization uses: a team, a person, or a service. Maximum 256 characters.","type":"string","maxLength":256,"example":"platform-team","uniqueKey":"grantee.oneOf.0","typeLabel":"string"},{"description":"Free-text grantee for this grant, in whatever form your organization uses: a team, a person, or a service. Maximum 256 characters.","type":"null","maxLength":256,"example":"platform-team","uniqueKey":"grantee.oneOf.1","typeLabel":"null"}],"uniqueKey":"grantee","typeLabel":"string | null"},"nextReviewAt":{"oneOf":[{"description":"When this grant should next be reviewed, as an ISO 8601 date-time string. Required when `reviewDecision` is `trust_until_review`, where it also sets the end of the trust window.","type":"string","format":"date-time","example":"2027-01-31T00:00:00.000Z","uniqueKey":"nextReviewAt.oneOf.0","typeLabel":"string\u003cdate-time>"},{"description":"When this grant should next be reviewed, as an ISO 8601 date-time string. Required when `reviewDecision` is `trust_until_review`, where it also sets the end of the trust window.","type":"null","format":"date-time","example":"2027-01-31T00:00:00.000Z","uniqueKey":"nextReviewAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"nextReviewAt","typeLabel":"string\u003cdate-time> | null"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"reviewDecision":"keep","reviewComment":"Vendor export feed, contract renewed 2026-07","grantee":"platform-team","nextReviewAt":"2027-01-31T00:00:00.000Z"}}},"exampleType":"generated"}},"exampleType":"generated"},"responses":{"7607a232-08db-4e8d-b379-835c2f90b3b8":{"description":"The updated access grant","content":{"application/json":{"schema":{"type":"object","properties":{"data":{"type":"object","properties":{"id":{"type":"string","example":"0f9a1c3e-5b7d-4c21-9e8f-2a6b4d10c7f3","uniqueKey":"data.id","typeLabel":"string"},"organizationId":{"type":"string","example":"dc16d897-7f52-4b73-be57-96c7c9a853da","uniqueKey":"data.organizationId","typeLabel":"string"},"tenantId":{"type":"string","example":"42749bc1-c99b-4c2c-a081-a6cda9370081","uniqueKey":"data.tenantId","typeLabel":"string"},"integrationId":{"type":"string","example":"458511a1-9bc2-4fce-97a0-0e3139588e6e","uniqueKey":"data.integrationId","typeLabel":"string"},"assetId":{"description":"The Plerion asset identifier of the resource granting the access.","type":"string","example":"prn:assets:458511a1-9bc2-4fce-97a0-0e3139588e6e:aws:s3:bucket:ap-southeast-2:acme-prod-exports","uniqueKey":"data.assetId","typeLabel":"string"},"resourceType":{"description":"CloudFormation resource type of the granting resource.","type":"string","example":"AWS::S3::Bucket","uniqueKey":"data.resourceType","typeLabel":"string"},"awsAccountId":{"description":"AWS account that owns the granting resource.","type":"string","example":"111122223333","uniqueKey":"data.awsAccountId","typeLabel":"string"},"region":{"description":"Region of the granting resource. `global` for resources that are not regional, such as IAM roles.","type":"string","example":"ap-southeast-2","uniqueKey":"data.region","typeLabel":"string"},"assetName":{"oneOf":[{"description":"Human-readable name of the granting resource. Null when the resource has no name Plerion can resolve.","type":"string","example":"acme-prod-exports","uniqueKey":"data.assetName.oneOf.0","typeLabel":"string"},{"description":"Human-readable name of the granting resource. Null when the resource has no name Plerion can resolve.","type":"null","example":"acme-prod-exports","uniqueKey":"data.assetName.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.assetName","typeLabel":"string | null"},"service":{"description":"AWS service the granting resource belongs to, matching the assets API.","type":"string","example":"AWS::S3","uniqueKey":"data.service","typeLabel":"string"},"grantType":{"description":"The specific surface within the mechanism that carries the grant.","type":"string","example":"resource_policy_statement","uniqueKey":"data.grantType","typeLabel":"string"},"mechanism":{"description":"How the access is granted.\n- `resource_policy`: a resource-based policy attached to the resource\n- `trust_policy`: the assume-role policy of an IAM role\n- `ram_share`: an AWS Resource Access Manager share\n- `attribute_share`: a cross-account permission attribute, such as an AMI or snapshot shared with another account","type":"string","example":"resource_policy","uniqueKey":"data.mechanism","typeLabel":"string"},"principal":{"description":"The principal the access is granted to, as it appears in the policy. `*` for a grant open to everyone.","type":"string","example":"arn:aws:iam::444455556666:root","uniqueKey":"data.principal","typeLabel":"string"},"principalType":{"description":"What the principal is.\n- `public`: `*` with no narrowing condition\n- `conditional`: `*` narrowed by a condition, but not to a single account\n- `aws_org`: `*` narrowed to one AWS organization\n- `aws_account`, `aws_role`, `aws_user`: a specific AWS identity\n- `oidc`, `saml`, `external_idp`, `cognito_identity`: a federated identity\n- `aws_service`, `aws_support`, `canonical_user`: an AWS-owned principal","type":"string","example":"aws_account","uniqueKey":"data.principalType","typeLabel":"string"},"principalLabel":{"oneOf":[{"description":"Friendly name for the principal where Plerion can resolve one.","type":"string","example":"Vendor - External","uniqueKey":"data.principalLabel.oneOf.0","typeLabel":"string"},{"description":"Friendly name for the principal where Plerion can resolve one.","type":"null","example":"Vendor - External","uniqueKey":"data.principalLabel.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.principalLabel","typeLabel":"string | null"},"principalDetail":{"oneOf":[{"description":"Additional detail about the principal, such as the federated provider it authenticates against.","type":"string","example":null,"uniqueKey":"data.principalDetail.oneOf.0","typeLabel":"string"},{"description":"Additional detail about the principal, such as the federated provider it authenticates against.","type":"null","example":null,"uniqueKey":"data.principalDetail.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.principalDetail","typeLabel":"string | null"},"principalAccountId":{"oneOf":[{"description":"AWS account of the principal. Null when the principal is not tied to a single account, such as a public or federated grant.","type":"string","example":"444455556666","uniqueKey":"data.principalAccountId.oneOf.0","typeLabel":"string"},{"description":"AWS account of the principal. Null when the principal is not tied to a single account, such as a public or federated grant.","type":"null","example":"444455556666","uniqueKey":"data.principalAccountId.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.principalAccountId","typeLabel":"string | null"},"grantScope":{"description":"The trust-boundary relationship between the principal and the resource owner.\n- `cross-org`: the principal is in an AWS account outside your organization\n- `same-org`: a different account inside your organization\n- `same-account`: the same account as the resource\n- `federated`: an identity from an external identity provider\n- `public`: `*` with no narrowing condition\n- `aws-service`: an AWS service endpoint","type":"string","example":"cross-org","uniqueKey":"data.grantScope","typeLabel":"string"},"grantOrigin":{"description":"`external` when the principal is outside your organization and the grant is not blocked by a resource control policy; `internal` otherwise.","type":"string","example":"external","uniqueKey":"data.grantOrigin","typeLabel":"string"},"allowedActions":{"oneOf":[{"description":"Actions the grant allows. Null means all actions.","type":"array","items":{"type":"string","uniqueKey":"data.allowedActions.oneOf.0.items.[INDEX]","typeLabel":"string"},"example":["s3:GetObject","s3:ListBucket"],"uniqueKey":"data.allowedActions.oneOf.0","typeLabel":"string[]"},{"description":"Actions the grant allows. Null means all actions.","type":"null","items":{"type":"string"},"example":["s3:GetObject","s3:ListBucket"],"uniqueKey":"data.allowedActions.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.allowedActions","typeLabel":"string[] | null"},"allowedNotActions":{"oneOf":[{"description":"Actions excluded from an otherwise-broad grant, from a policy `NotAction` element.","type":"array","items":{"type":"string","uniqueKey":"data.allowedNotActions.oneOf.0.items.[INDEX]","typeLabel":"string"},"example":null,"uniqueKey":"data.allowedNotActions.oneOf.0","typeLabel":"string[]"},{"description":"Actions excluded from an otherwise-broad grant, from a policy `NotAction` element.","type":"null","items":{"type":"string"},"example":null,"uniqueKey":"data.allowedNotActions.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.allowedNotActions","typeLabel":"string[] | null"},"conditions":{"oneOf":[{"description":"The condition block attached to the grant, verbatim from the policy, keyed by condition operator.\nThis is what distinguishes a grant that is genuinely open from one narrowed to your own network or\norganization, so it is worth reading before acting on `grantScope` alone. Null when the grant carries\nno conditions.","type":"object","additionalProperties":true,"example":{"StringEquals":{"aws:PrincipalOrgID":"o-abc123"}},"uniqueKey":"data.conditions.oneOf.0","typeLabel":"object"},{"description":"The condition block attached to the grant, verbatim from the policy, keyed by condition operator.\nThis is what distinguishes a grant that is genuinely open from one narrowed to your own network or\norganization, so it is worth reading before acting on `grantScope` alone. Null when the grant carries\nno conditions.","type":"null","additionalProperties":true,"example":{"StringEquals":{"aws:PrincipalOrgID":"o-abc123"}},"uniqueKey":"data.conditions.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.conditions","typeLabel":"object | null"},"blockedByRcp":{"description":"Whether a resource control policy blocks this access today.","type":"boolean","example":false,"uniqueKey":"data.blockedByRcp","typeLabel":"boolean"},"rcpStatus":{"oneOf":[{"description":"Whether resource control policies were evaluated for this grant. Null when the grant has not been evaluated.\n\nAvailable options: `applied`, `not-applicable`, `unknown`","type":"string","example":"not-applicable","uniqueKey":"data.rcpStatus.oneOf.0","typeLabel":"string"},{"description":"Whether resource control policies were evaluated for this grant. Null when the grant has not been evaluated.\n\nAvailable options: `applied`, `not-applicable`, `unknown`","type":"null","example":"not-applicable","uniqueKey":"data.rcpStatus.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.rcpStatus","typeLabel":"string | null"},"hasRuntimeConditions":{"description":"Whether the grant carries conditions whose outcome depends on request context at runtime, such as source IP or VPC endpoint.","type":"boolean","example":true,"uniqueKey":"data.hasRuntimeConditions","typeLabel":"boolean"},"trustStatus":{"oneOf":[{"description":"Whether this grant is trusted, recalculated on every scan. Read-only. Trust has two sources and either is enough: the principal matches your tenant's trusted-principals list, or a reviewer opened a trust window on this one grant with `reviewDecision: trust_until_review` (see `trustedUntil`). Null when the grant has not been evaluated, which is the case for all `internal` grants.\n\nAvailable options: `trusted`, `untrusted`","type":"string","example":"untrusted","uniqueKey":"data.trustStatus.oneOf.0","typeLabel":"string"},{"description":"Whether this grant is trusted, recalculated on every scan. Read-only. Trust has two sources and either is enough: the principal matches your tenant's trusted-principals list, or a reviewer opened a trust window on this one grant with `reviewDecision: trust_until_review` (see `trustedUntil`). Null when the grant has not been evaluated, which is the case for all `internal` grants.\n\nAvailable options: `trusted`, `untrusted`","type":"null","example":"untrusted","uniqueKey":"data.trustStatus.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.trustStatus","typeLabel":"string | null"},"trustedUntil":{"oneOf":[{"description":"The end of the trust window a reviewer opened on this grant, from `reviewDecision: trust_until_review`. Read-only. Null when no window is open, which includes a grant trusted through the trusted-principals list instead, since that trust does not expire. A window is closed by the scan that first runs after this instant, not at the instant itself.","type":"string","format":"date-time","example":"2027-01-31T00:00:00.000Z","uniqueKey":"data.trustedUntil.oneOf.0","typeLabel":"string\u003cdate-time>"},{"description":"The end of the trust window a reviewer opened on this grant, from `reviewDecision: trust_until_review`. Read-only. Null when no window is open, which includes a grant trusted through the trusted-principals list instead, since that trust does not expire. A window is closed by the scan that first runs after this instant, not at the instant itself.","type":"null","format":"date-time","example":"2027-01-31T00:00:00.000Z","uniqueKey":"data.trustedUntil.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.trustedUntil","typeLabel":"string\u003cdate-time> | null"},"trustLapseReason":{"oneOf":[{"description":"Why a reviewer's trust is no longer in force. Read-only. Null while a window is open, and null when the grant never carried one. `expired` means the review date passed, `date_cleared` means the review date was removed, and `content_changed` means the grant's actions, conditions or resource scope changed after it was trusted. `content_changed` is the one needing a person: trust ended early and Plerion also cleared `reviewDecision` and `nextReviewAt`, so the grant is back to undecided.\n\nAvailable options: `expired`, `date_cleared`, `content_changed`","type":"string","example":"expired","uniqueKey":"data.trustLapseReason.oneOf.0","typeLabel":"string"},{"description":"Why a reviewer's trust is no longer in force. Read-only. Null while a window is open, and null when the grant never carried one. `expired` means the review date passed, `date_cleared` means the review date was removed, and `content_changed` means the grant's actions, conditions or resource scope changed after it was trusted. `content_changed` is the one needing a person: trust ended early and Plerion also cleared `reviewDecision` and `nextReviewAt`, so the grant is back to undecided.\n\nAvailable options: `expired`, `date_cleared`, `content_changed`","type":"null","example":"expired","uniqueKey":"data.trustLapseReason.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.trustLapseReason","typeLabel":"string | null"},"grantee":{"oneOf":[{"description":"The team, person or service accountable for this access, as recorded by the most recent review that set it.","type":"string","example":"platform-team","uniqueKey":"data.grantee.oneOf.0","typeLabel":"string"},{"description":"The team, person or service accountable for this access, as recorded by the most recent review that set it.","type":"null","example":"platform-team","uniqueKey":"data.grantee.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.grantee","typeLabel":"string | null"},"reviewDecision":{"oneOf":[{"description":"The current decision on this grant. Null until a review records one.\n\nAvailable options: `keep`, `remove`, `review_later`, `trust_until_review`","type":"string","example":"keep","uniqueKey":"data.reviewDecision.oneOf.0","typeLabel":"string"},{"description":"The current decision on this grant. Null until a review records one.\n\nAvailable options: `keep`, `remove`, `review_later`, `trust_until_review`","type":"null","example":"keep","uniqueKey":"data.reviewDecision.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.reviewDecision","typeLabel":"string | null"},"reviewComment":{"oneOf":[{"description":"The note from the most recent review that set one.","type":"string","example":"Vendor export feed, contract renewed 2026-07","uniqueKey":"data.reviewComment.oneOf.0","typeLabel":"string"},{"description":"The note from the most recent review that set one.","type":"null","example":"Vendor export feed, contract renewed 2026-07","uniqueKey":"data.reviewComment.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.reviewComment","typeLabel":"string | null"},"nextReviewAt":{"oneOf":[{"description":"When this grant should next be reviewed. Filter on it with `nextReviewAtEnd`.","type":"string","format":"date-time","example":"2027-01-31T00:00:00.000Z","uniqueKey":"data.nextReviewAt.oneOf.0","typeLabel":"string\u003cdate-time>"},{"description":"When this grant should next be reviewed. Filter on it with `nextReviewAtEnd`.","type":"null","format":"date-time","example":"2027-01-31T00:00:00.000Z","uniqueKey":"data.nextReviewAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.nextReviewAt","typeLabel":"string\u003cdate-time> | null"},"reviewedBy":{"oneOf":[{"description":"Who last recorded a review. A user's email address, `Pleri` when the change came from the Pleri agent, or the API key name followed by `(API key)`.","type":"string","example":"ci-audit-key (API key)","uniqueKey":"data.reviewedBy.oneOf.0","typeLabel":"string"},{"description":"Who last recorded a review. A user's email address, `Pleri` when the change came from the Pleri agent, or the API key name followed by `(API key)`.","type":"null","example":"ci-audit-key (API key)","uniqueKey":"data.reviewedBy.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.reviewedBy","typeLabel":"string | null"},"reviewedAt":{"oneOf":[{"description":"When the most recent review was recorded.","type":"string","format":"date-time","example":"2026-07-20T05:41:09.000Z","uniqueKey":"data.reviewedAt.oneOf.0","typeLabel":"string\u003cdate-time>"},{"description":"When the most recent review was recorded.","type":"null","format":"date-time","example":"2026-07-20T05:41:09.000Z","uniqueKey":"data.reviewedAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.reviewedAt","typeLabel":"string\u003cdate-time> | null"},"reviewHistory":{"oneOf":[{"description":"The reviews recorded against this grant, oldest first. Null when the grant has never been reviewed. Each entry lists only the fields that review changed, so an absent field was left as it was and a field set to `null` was cleared.","type":"array","items":{"type":"object","properties":{"reviewedBy":{"oneOf":[{"description":"A user's email address, `Pleri` when the change came from the Pleri agent, or the API key name followed by `(API key)`. Null when Plerion recorded the entry itself rather than a person doing so, which is how a trust window opening or closing on its own appears.","type":"string","example":"my-api-key (API key)","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].reviewedBy.oneOf.0","typeLabel":"string"},{"description":"A user's email address, `Pleri` when the change came from the Pleri agent, or the API key name followed by `(API key)`. Null when Plerion recorded the entry itself rather than a person doing so, which is how a trust window opening or closing on its own appears.","type":"null","example":"my-api-key (API key)","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].reviewedBy.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].reviewedBy","typeLabel":"string | null"},"reviewedAt":{"type":"string","format":"date-time","example":"2026-07-20T05:41:09.000Z","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].reviewedAt","typeLabel":"string\u003cdate-time>"},"decision":{"oneOf":[{"type":"string","enum":["keep","remove","review_later","trust_until_review",null],"example":"keep","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].decision.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"null","enum":["keep","remove","review_later","trust_until_review",null],"example":"keep","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].decision.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].decision","typeLabel":"enum\u003cstring> | null"},"grantee":{"oneOf":[{"type":"string","example":"platform-team","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].grantee.oneOf.0","typeLabel":"string"},{"type":"null","example":"platform-team","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].grantee.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].grantee","typeLabel":"string | null"},"comment":{"oneOf":[{"type":"string","example":"Vendor export feed, contract renewed 2026-07","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].comment.oneOf.0","typeLabel":"string"},{"type":"null","example":"Vendor export feed, contract renewed 2026-07","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].comment.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].comment","typeLabel":"string | null"},"nextReviewAt":{"oneOf":[{"type":"string","format":"date-time","example":"2027-01-31T00:00:00.000Z","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].nextReviewAt.oneOf.0","typeLabel":"string\u003cdate-time>"},{"type":"null","format":"date-time","example":"2027-01-31T00:00:00.000Z","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].nextReviewAt.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].nextReviewAt","typeLabel":"string\u003cdate-time> | null"},"trustedUntil":{"oneOf":[{"description":"Present when this entry opened or closed a trust window. Null means the window closed.","type":"string","format":"date-time","example":"2027-01-31T00:00:00.000Z","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].trustedUntil.oneOf.0","typeLabel":"string\u003cdate-time>"},{"description":"Present when this entry opened or closed a trust window. Null means the window closed.","type":"null","format":"date-time","example":"2027-01-31T00:00:00.000Z","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].trustedUntil.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].trustedUntil","typeLabel":"string\u003cdate-time> | null"},"trustLapseReason":{"oneOf":[{"description":"Present when this entry changed why a reviewer's trust is not in force.","type":"string","enum":["expired","date_cleared","content_changed",null],"example":"expired","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].trustLapseReason.oneOf.0","typeLabel":"enum\u003cstring>"},{"description":"Present when this entry changed why a reviewer's trust is not in force.","type":"null","enum":["expired","date_cleared","content_changed",null],"example":"expired","uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].trustLapseReason.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX].trustLapseReason","typeLabel":"enum\u003cstring> | null"}},"uniqueKey":"data.reviewHistory.oneOf.0.items.[INDEX]","typeLabel":"object"},"uniqueKey":"data.reviewHistory.oneOf.0","typeLabel":"object[]"},{"description":"The reviews recorded against this grant, oldest first. Null when the grant has never been reviewed. Each entry lists only the fields that review changed, so an absent field was left as it was and a field set to `null` was cleared.","type":"null","items":{"type":"object","properties":{"reviewedBy":{"oneOf":[{"description":"A user's email address, `Pleri` when the change came from the Pleri agent, or the API key name followed by `(API key)`. Null when Plerion recorded the entry itself rather than a person doing so, which is how a trust window opening or closing on its own appears.","type":"string","example":"my-api-key (API key)"},{"description":"A user's email address, `Pleri` when the change came from the Pleri agent, or the API key name followed by `(API key)`. Null when Plerion recorded the entry itself rather than a person doing so, which is how a trust window opening or closing on its own appears.","type":"null","example":"my-api-key (API key)"}]},"reviewedAt":{"type":"string","format":"date-time","example":"2026-07-20T05:41:09.000Z"},"decision":{"oneOf":[{"type":"string","enum":["keep","remove","review_later","trust_until_review",null],"example":"keep"},{"type":"null","enum":["keep","remove","review_later","trust_until_review",null],"example":"keep"}]},"grantee":{"oneOf":[{"type":"string","example":"platform-team"},{"type":"null","example":"platform-team"}]},"comment":{"oneOf":[{"type":"string","example":"Vendor export feed, contract renewed 2026-07"},{"type":"null","example":"Vendor export feed, contract renewed 2026-07"}]},"nextReviewAt":{"oneOf":[{"type":"string","format":"date-time","example":"2027-01-31T00:00:00.000Z"},{"type":"null","format":"date-time","example":"2027-01-31T00:00:00.000Z"}]},"trustedUntil":{"oneOf":[{"description":"Present when this entry opened or closed a trust window. Null means the window closed.","type":"string","format":"date-time","example":"2027-01-31T00:00:00.000Z"},{"description":"Present when this entry opened or closed a trust window. Null means the window closed.","type":"null","format":"date-time","example":"2027-01-31T00:00:00.000Z"}]},"trustLapseReason":{"oneOf":[{"description":"Present when this entry changed why a reviewer's trust is not in force.","type":"string","enum":["expired","date_cleared","content_changed",null],"example":"expired"},{"description":"Present when this entry changed why a reviewer's trust is not in force.","type":"null","enum":["expired","date_cleared","content_changed",null],"example":"expired"}]}}},"uniqueKey":"data.reviewHistory.oneOf.1","typeLabel":"null"}],"uniqueKey":"data.reviewHistory","typeLabel":"object[] | null"},"firstObservedAt":{"description":"When Plerion first observed this grant.","type":"string","format":"date-time","example":"2026-05-14T02:11:47.000Z","uniqueKey":"data.firstObservedAt","typeLabel":"string\u003cdate-time>"},"lastObservedAt":{"description":"When Plerion last observed this grant. Grants no longer observed are excluded from these endpoints.","type":"string","format":"date-time","example":"2026-07-28T01:03:12.000Z","uniqueKey":"data.lastObservedAt","typeLabel":"string\u003cdate-time>"}},"uniqueKey":"data","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"data":{"id":"0f9a1c3e-5b7d-4c21-9e8f-2a6b4d10c7f3","organizationId":"dc16d897-7f52-4b73-be57-96c7c9a853da","tenantId":"42749bc1-c99b-4c2c-a081-a6cda9370081","integrationId":"458511a1-9bc2-4fce-97a0-0e3139588e6e","assetId":"prn:assets:458511a1-9bc2-4fce-97a0-0e3139588e6e:aws:s3:bucket:ap-southeast-2:acme-prod-exports","resourceType":"AWS::S3::Bucket","awsAccountId":"111122223333","region":"ap-southeast-2","assetName":"acme-prod-exports","service":"AWS::S3","grantType":"resource_policy_statement","mechanism":"resource_policy","principal":"arn:aws:iam::444455556666:root","principalType":"aws_account","principalLabel":"Vendor - External","principalDetail":null,"principalAccountId":"444455556666","grantScope":"cross-org","grantOrigin":"external","allowedActions":["s3:GetObject","s3:ListBucket"],"allowedNotActions":null,"conditions":{"StringEquals":{"aws:PrincipalOrgID":"o-abc123"}},"blockedByRcp":false,"rcpStatus":"not-applicable","hasRuntimeConditions":true,"trustStatus":"untrusted","trustedUntil":"2027-01-31T00:00:00.000Z","trustLapseReason":"expired","grantee":"platform-team","reviewDecision":"keep","reviewComment":"Vendor export feed, contract renewed 2026-07","nextReviewAt":"2027-01-31T00:00:00.000Z","reviewedBy":"ci-audit-key (API key)","reviewedAt":"2026-07-20T05:41:09.000Z","reviewHistory":[{"reviewedBy":"my-api-key (API key)","reviewedAt":"2026-07-20T05:41:09.000Z","decision":"keep","grantee":"platform-team","comment":"Vendor export feed, contract renewed 2026-07","nextReviewAt":"2027-01-31T00:00:00.000Z","trustedUntil":"2027-01-31T00:00:00.000Z","trustLapseReason":"expired"}],"firstObservedAt":"2026-05-14T02:11:47.000Z","lastObservedAt":"2026-07-28T01:03:12.000Z"}}}},"exampleType":"generated"}},"exampleType":"generated"},"72c6d387-b5f2-4a56-b9bb-22e7f63b89ec":{"description":"Bad Request","content":{"application/json":{"schema":{"properties":{"errors":{"type":"array","items":{"type":"object","properties":{"field":{"type":"string","uniqueKey":"errors.items.[INDEX].field","typeLabel":"string"},"code":{"type":"string","uniqueKey":"errors.items.[INDEX].code","typeLabel":"string"},"message":{"type":"string","uniqueKey":"errors.items.[INDEX].message","typeLabel":"string"}},"uniqueKey":"errors.items.[INDEX]","typeLabel":"object"},"uniqueKey":"errors","typeLabel":"object[]"}},"type":"object","uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"errors":[{"field":"\u003cstring>","code":"\u003cstring>","message":"\u003cstring>"}]}}},"exampleType":"generated"}},"exampleType":"generated"},"345a5eb5-bbfe-4037-9f20-f5710c7b0ddb":{"description":"Not Found","content":{"application/json":{"schema":{"properties":{"errors":{"type":"array","items":{"type":"object","properties":{"code":{"type":"string","uniqueKey":"errors.items.[INDEX].code","typeLabel":"string"},"message":{"type":"string","uniqueKey":"errors.items.[INDEX].message","typeLabel":"string"}},"uniqueKey":"errors.items.[INDEX]","typeLabel":"object"},"uniqueKey":"errors","typeLabel":"object[]"}},"type":"object","uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"errors":[{"code":"\u003cstring>","message":"\u003cstring>"}]}}},"exampleType":"generated"}},"exampleType":"generated"},"4eadf5f7-4032-4153-b72c-d990bf90edaf":{"description":"Internal Server Error","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string","example":"Internal server error","uniqueKey":"message","typeLabel":"string"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"message":"Internal server error"}}},"exampleType":"generated"}},"exampleType":"generated"}},"security":{"7221b03a-1c7f-493e-bd52-0d5867c0fe21":{"APIKey":{"type":"http","scheme":"bearer","bearerFormat":"apiKey","description":"Bearer API Key. For example, \"Bearer {Tenant API Key}\"","scopes":[],"schemeName":"APIKey"}}},"servers":{"261340cd-c547-4350-bc6e-f80804ae395f":{"url":"https://{region}.api.plerion.com","description":"Production API server - Select your preferred region","variables":{"region":{"default":"au","enum":["au","sg1","in1","us1"]}}}},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"http","scheme":"bearer","bearerFormat":"apiKey","description":"Bearer API Key. For example, \"Bearer {Tenant API Key}\"","scopes":[],"schemeName":"APIKey"},"schema":{"title":"Bearer Auth","type":"string","isRequired":true,"description":"Bearer API Key. For example, \"Bearer {Tenant API Key}\"","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"APIKey","name":"Authorization"}],"title":"APIKey"}]},"originalFileLocation":"api-reference/openapi.yaml"},"subdomain":"pleriondocs","siteName":"Plerion, Simplify Cloud Security - documentation","title":"Review an AWS access grant - Plerion, Simplify Cloud Security - documentation","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-11-03T08:37:24.389Z","originalFileLocation":"api-reference/aws-access-grants/update.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Record a review decision on a single access grant. Send only the fields you want to change. Each accepted request updates the current review state and appends an entry to the grant\u0026#x27;s review history.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Plerion, Simplify Cloud Security - documentation\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/pleriondocs/xDuw_jwQ1ux0MEWx/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/pleriondocs/xDuw_jwQ1ux0MEWx/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/pleriondocs/xDuw_jwQ1ux0MEWx/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/pleriondocs/xDuw_jwQ1ux0MEWx/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/pleriondocs/xDuw_jwQ1ux0MEWx/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/pleriondocs/xDuw_jwQ1ux0MEWx/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/pleriondocs/xDuw_jwQ1ux0MEWx/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/pleriondocs/xDuw_jwQ1ux0MEWx/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/pleriondocs/xDuw_jwQ1ux0MEWx/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Review an AWS access grant - Plerion, Simplify Cloud Security - documentation\">\u003cmeta data-mint-head property=\"og:description\" content=\"Record a review decision on a single access grant. Send only the fields you want to change. Each accepted request updates the current review state and appends an entry to the grant\u0026#x27;s review history.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Plerion, Simplify Cloud Security - documentation\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.plerion.com/api-reference/aws-access-grants/update\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://pleriondocs.mintlify.app/_mintlify/api/og/v2?division=AWS+access+grants\u0026amp;title=Review+an+AWS+access+grant\u0026amp;description=Record+a+review+decision+on+a+single+access+grant.+Send+only+the+fields+you+want+to+change.+Each+accepted+request+updates+the+current+review+state+and+appends+a\u0026amp;theme=20f0c40f02b58da5abe20cea\u0026amp;signature=040398af32d02bcc65634b0f8e2be8d3dcfe5db09656010c056d61c55ec9ba2d\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Review an AWS access grant - Plerion, Simplify Cloud Security - documentation\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Record a review decision on a single access grant. Send only the fields you want to change. Each accepted request updates the current review state and appends an entry to the grant\u0026#x27;s review history.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://pleriondocs.mintlify.app/_mintlify/api/og/v2?division=AWS+access+grants\u0026amp;title=Review+an+AWS+access+grant\u0026amp;description=Record+a+review+decision+on+a+single+access+grant.+Send+only+the+fields+you+want+to+change.+Each+accepted+request+updates+the+current+review+state+and+appends+a\u0026amp;theme=20f0c40f02b58da5abe20cea\u0026amp;signature=040398af32d02bcc65634b0f8e2be8d3dcfe5db09656010c056d61c55ec9ba2d\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/pleriondocs/xDuw_jwQ1ux0MEWx/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Plerion, Simplify Cloud Security - documentation\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#FFA500\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.plerion.com/api-reference/aws-access-grants/update\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/aws-access-grants/update.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.plerion.com/#organization\",\"name\":\"Plerion, Simplify Cloud Security - documentation\",\"url\":\"https://docs.plerion.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/pleriondocs/GIwfwlVd5Zt2w0-r/logo/plerion.svg?fit=max\u0026auto=format\u0026n=GIwfwlVd5Zt2w0-r\u0026q=85\u0026s=86e89d26c3b52a61495baaf98faff52c\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.plerion.com#website\",\"name\":\"Plerion, Simplify Cloud Security - documentation\",\"url\":\"https://docs.plerion.com\",\"publisher\":{\"@id\":\"https://docs.plerion.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.plerion.com/api-reference/aws-access-grants/update#webpage\",\"url\":\"https://docs.plerion.com/api-reference/aws-access-grants/update\",\"name\":\"Review an AWS access grant\",\"description\":\"Record a review decision on a single access grant. Send only the fields you want to change. Each accepted request updates the current review state and appends an entry to the grant's review history.\",\"dateModified\":\"2026-11-03T08:37:24.389Z\",\"isPartOf\":{\"@id\":\"https://docs.plerion.com#website\"},\"breadcrumb\":{\"@id\":\"https://docs.plerion.com/api-reference/aws-access-grants/update#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.plerion.com/api-reference/aws-access-grants/update#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"API documentation\",\"item\":\"https://docs.plerion.com/api-reference/findings/list\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AWS access grants\",\"item\":\"https://docs.plerion.com/api-reference/aws-access-grants/list\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Review an AWS access grant\",\"item\":\"https://docs.plerion.com/api-reference/aws-access-grants/update\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.plerion.com/api-reference/aws-access-grants/update#apireference\",\"headline\":\"Review an AWS access grant\",\"name\":\"Review an AWS access grant\",\"description\":\"Record a review decision on a single access grant. Send only the fields you want to change. Each accepted request updates the current review state and appends an entry to the grant's review history.\",\"url\":\"https://docs.plerion.com/api-reference/aws-access-grants/update\",\"mainEntityOfPage\":{\"@id\":\"https://docs.plerion.com/api-reference/aws-access-grants/update#webpage\"},\"dateModified\":\"2026-11-03T08:37:24.389Z\",\"publisher\":{\"@id\":\"https://docs.plerion.com/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.plerion.com#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Plerion, Simplify Cloud Security - documentation\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Plerion, Simplify Cloud Security - documentation","nav":{"global":null,"tabs":[{"tab":"Welcome","pages":[{"title":"Welcome","href":""}]},{"tab":"Guides","pages":[{"title":"Guides","href":"/guides/getting-started"}]},{"tab":"API reference","groups":[{"group":"Overview","pages":[{"title":"Quick start with Plerion API","href":"/api-reference"},{"title":"API categories","href":"/api-reference/api-categories"}]},{"group":"API documentation","pages":[{"group":"Findings","pages":[{"title":"List findings","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/findings","href":"/api-reference/findings/list"}]},{"group":"Alerts","pages":[{"title":"List alerts","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/alerts","href":"/api-reference/alerts/list"}]},{"group":"AWS integration","pages":[{"title":"Get the tenant's external ID","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/external-id","href":"/api-reference/aws-integration/get-external-id"},{"title":"Create an onboarding token for a new integration","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/integrations/token","href":"/api-reference/aws-integration/generate-temporary-token"},{"title":"Get the onboarding CloudFormation template","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/cloudformation-templates","href":"/api-reference/aws-integration/get-cloudformation-template"}]},{"group":"Tenant","pages":[{"title":"Get this tenant","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant","href":"/api-reference/tenant/get"},{"title":"Get what this key can call","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/openapi","href":"/api-reference/tenant/discover"},{"title":"Get this tenant's usage","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/usage","href":"/api-reference/tenant/usage"}]},{"group":"Integrations","pages":[{"title":"List inbound integrations","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/integrations","href":"/api-reference/integrations/list-inbound-integrations"},{"title":"Replace an integration's user-defined tags","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml put /v1/tenant/integrations/{integrationId}/user-defined-tags","href":"/api-reference/integrations/replace-user-defined-tags"}]},{"group":"Code security","pages":[{"title":"Upload infrastructure code for scanning","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/shiftleft/iac/scan","href":"/api-reference/code-security/upload-iac"},{"title":"List code scans","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/shiftleft/iac/scans","href":"/api-reference/code-security/list-scans"},{"title":"List a code scan's findings","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/shiftleft/iac/scans/{scanId}/findings","href":"/api-reference/code-security/list-findings"},{"title":"List a code scan's vulnerabilities","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/shiftleft/iac/scans/{scanId}/vulnerabilities","href":"/api-reference/code-security/list-vulnerabilities"}]},{"group":"Compliance frameworks","pages":[{"title":"List compliance frameworks","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/compliance-frameworks","href":"/api-reference/compliance-frameworks/list"},{"title":"Download a compliance report","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/integrations/{integrationId}/compliance-frameworks/{complianceId}/download","href":"/api-reference/compliance-frameworks/download-report"},{"title":"Request a compliance report","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/integrations/{integrationId}/frameworks/{complianceFrameworkId}/reports","href":"/api-reference/compliance-frameworks/request-a-framework-report"}]},{"group":"Assets","pages":[{"title":"List assets","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/assets","href":"/api-reference/assets/list"},{"title":"Get an asset","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/assets/{assetId}","href":"/api-reference/assets/get"},{"title":"Get an asset's SBOM","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/assets/{assetId}/sbom","href":"/api-reference/assets/get-sbom"},{"title":"Get an SBOM by asset ID","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/assets/sbom","href":"/api-reference/assets/get-sbom-by-asset-id"}]},{"group":"Asset groups","pages":[{"title":"List asset groups","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/asset-groups","href":"/api-reference/asset-groups/list"},{"title":"Create an asset group","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/asset-groups","href":"/api-reference/asset-groups/create"},{"title":"Get an asset group","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/asset-groups/{assetGroupId}","href":"/api-reference/asset-groups/get"},{"title":"Delete an asset group","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml delete /v1/tenant/asset-groups/{assetGroupId}","href":"/api-reference/asset-groups/delete"},{"title":"Update an asset group","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml patch /v1/tenant/asset-groups/{assetGroupId}","href":"/api-reference/asset-groups/update"}]},{"group":"Well-Architected frameworks","pages":[{"title":"List Well-Architected frameworks","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/well-architected-frameworks","href":"/api-reference/well-architected-frameworks/list"},{"title":"Download a Well-Architected report","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/integrations/{integrationId}/well-architected-frameworks/{wellArchitectedFrameworkId}/download","href":"/api-reference/well-architected-frameworks/download-report"},{"title":"Request a Well-Architected report","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/integrations/{integrationId}/frameworks/{wellArchitectedFrameworkId}/reports","href":"/api-reference/well-architected-frameworks/request-framework-report"}]},{"group":"Vulnerabilities","pages":[{"title":"List vulnerabilities","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/vulnerabilities","href":"/api-reference/vulnerabilities/list"},{"title":"List vulnerability exemptions","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/profiles/{profileId}/vulnerability/exemptions","href":"/api-reference/vulnerabilities/list-vulnerability-exemptions-in-a-profile"},{"title":"Create a vulnerability exemption","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/profiles/{profileId}/vulnerability/exemptions","href":"/api-reference/vulnerabilities/create-a-vulnerability-exemption-in-a-profile"},{"title":"Get a vulnerability exemption","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/profiles/{profileId}/vulnerability/exemptions/{id}","href":"/api-reference/vulnerabilities/get-a-vulnerability-exemption-by-id"},{"title":"Delete a vulnerability exemption","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml delete /v1/tenant/profiles/{profileId}/vulnerability/exemptions/{id}","href":"/api-reference/vulnerabilities/delete-a-vulnerability-exemption-by-id"},{"title":"Update a vulnerability exemption","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml patch /v1/tenant/profiles/{profileId}/vulnerability/exemptions/{id}","href":"/api-reference/vulnerabilities/update-a-vulnerability-exemption-by-id"}]},{"group":"Profiles","pages":[{"title":"List profiles","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/profiles","href":"/api-reference/profiles/list"}]},{"group":"Detection exemptions","pages":[{"title":"Get a detection's exemptions","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/profiles/{profileId}/detection-settings/{detectionId}/exemptions","href":"/api-reference/detection-exemptions/get"},{"title":"Replace a detection's exemptions","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml put /v1/tenant/profiles/{profileId}/detection-settings/{detectionId}/exemptions","href":"/api-reference/detection-exemptions/replace"}]},{"group":"Risks","pages":[{"title":"List risks","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/risks","href":"/api-reference/risks/list"},{"title":"Get a risk","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/risks/{riskId}","href":"/api-reference/risks/get"}]},{"group":"Audit logs","pages":[{"title":"List audit logs","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/audit-logs","href":"/api-reference/audit-logs/list"}]},{"group":"Custom checks","pages":[{"title":"List custom checks","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/custom-checks","href":"/api-reference/custom-checks/list"},{"title":"Create a custom check","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/custom-checks","href":"/api-reference/custom-checks/create"},{"title":"Get a custom check","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/custom-checks/{customCheckId}","href":"/api-reference/custom-checks/get"},{"title":"Replace a custom check","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml put /v1/tenant/custom-checks/{customCheckId}","href":"/api-reference/custom-checks/update"},{"title":"Delete a custom check","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml delete /v1/tenant/custom-checks/{customCheckId}","href":"/api-reference/custom-checks/delete"},{"title":"Start a custom check dry run","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/custom-check-dry-runs","href":"/api-reference/custom-checks/start-dry-run"},{"title":"Get a dry run's status","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/custom-check-dry-runs/{dryRunId}","href":"/api-reference/custom-checks/get-dry-run-status"}]},{"group":"Metrics","pages":[{"title":"Query metrics","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/metrics","href":"/api-reference/metrics/query"}]},{"group":"Workload scans","pages":[{"title":"Request a workload scan","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/workload/scans","href":"/api-reference/workload-scans/request"},{"title":"Get a workload scan","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/workload/scans/{scanId}","href":"/api-reference/workload-scans/get"}]},{"group":"AWS access grants","pages":[{"title":"List AWS access grants","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/aws/access-grants","href":"/api-reference/aws-access-grants/list"},{"title":"Get access grant counts","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/aws/access-grants/stats","href":"/api-reference/aws-access-grants/stats"},{"title":"List external principals with access","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/aws/access-grants/external-principals","href":"/api-reference/aws-access-grants/external-principals"},{"title":"Get an AWS access grant","description":"Fetch a single access grant by its ID.","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/aws/access-grants/{id}","href":"/api-reference/aws-access-grants/get"},{"title":"Review an AWS access grant","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml patch /v1/tenant/aws/access-grants/{id}","href":"/api-reference/aws-access-grants/update"}]},{"group":"Custom dashboards","pages":[{"title":"List the tenant's custom dashboards","description":"Returns the tenant's custom dashboards with the id each one is referred to by elsewhere, for example as `homeReportId` on a preference.\n```bash\ncurl \"https://au.api.plerion.com/v1/tenant/custom-reports?perPage=50\" -H \"Authorization: Bearer $PLERION_API_KEY\"\n```","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/custom-reports","href":"/api-reference/custom-dashboards/list"}]},{"group":"Preferences","pages":[{"title":"Get the tenant default home dashboard","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/preferences/home-dashboard","href":"/api-reference/preferences/get-tenant-default"},{"title":"Set the tenant default home dashboard","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml put /v1/tenant/preferences/home-dashboard","href":"/api-reference/preferences/set-tenant-default"},{"title":"Clear the tenant default home dashboard","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml delete /v1/tenant/preferences/home-dashboard","href":"/api-reference/preferences/clear-tenant-default"}]},{"group":"Ownership","pages":[{"title":"List ownership rules","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/ownership/rules","href":"/api-reference/ownership/list-rules"},{"title":"Set ownership rules","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml put /v1/tenant/ownership/rules","href":"/api-reference/ownership/set-rules"},{"title":"Preview ownership rules","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/ownership/rules/preview","href":"/api-reference/ownership/preview-rules"},{"title":"Get ownership settings","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/ownership/settings","href":"/api-reference/ownership/get-settings"},{"title":"Update ownership settings","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml put /v1/tenant/ownership/settings","href":"/api-reference/ownership/update-settings"},{"title":"List tag keys for ownership","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/ownership/tag-keys","href":"/api-reference/ownership/list-tag-keys"},{"title":"List integration tag keys for ownership","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/ownership/integration-tag-keys","href":"/api-reference/ownership/list-integration-tag-keys"},{"title":"Get ownership summary","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/ownership/summary","href":"/api-reference/ownership/get-summary"},{"title":"List assets with no owner, by reason","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/ownership/uncovered","href":"/api-reference/ownership/list-assets-with-no-owner"},{"title":"Explain an asset's owners","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/ownership/explain","href":"/api-reference/ownership/explain-an-assets-owners"},{"title":"Set owners on assets by hand","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml put /v1/tenant/assets/owner","href":"/api-reference/ownership/set-owners-on-assets"},{"title":"List owners","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/owners","href":"/api-reference/ownership/list-owners"},{"title":"Create an owner","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/owners","href":"/api-reference/ownership/create-an-owner"},{"title":"Delete several owners","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/owners/not-an-owner","href":"/api-reference/ownership/delete-several-owners"},{"title":"List owners that are likely duplicates","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/owners/review","href":"/api-reference/ownership/list-likely-duplicates"},{"title":"Delete an owner","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml delete /v1/tenant/owners/{ownerId}","href":"/api-reference/ownership/delete-an-owner"},{"title":"Update an owner","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml patch /v1/tenant/owners/{ownerId}","href":"/api-reference/ownership/update-an-owner"},{"title":"Merge owners into one","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/owners/{ownerId}/merge","href":"/api-reference/ownership/merge-owners"},{"title":"Undo a merge","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml post /v1/tenant/owners/{ownerId}/unmerge","href":"/api-reference/ownership/undo-a-merge"},{"title":"Add or remove the names an owner goes by","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml patch /v1/tenant/owners/{ownerId}/aliases","href":"/api-reference/ownership/update-an-owners-names"},{"title":"Get an owner's history","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/owners/{ownerId}/history","href":"/api-reference/ownership/get-owner-history"},{"title":"Get the commands to retag an owner's assets","deprecated":null,"version":null,"openapi":"/api-reference/openapi.yaml get /v1/tenant/owners/{ownerId}/retag-plan","href":"/api-reference/ownership/get-retag-commands"}]}]},{"group":"Organization API","pages":[{"group":"Roles","pages":[{"title":"List roles","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml get /v1/organization/roles","href":"/api-reference/roles/list-roles"},{"title":"Create a custom role","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml post /v1/organization/roles","href":"/api-reference/roles/create-a-custom-role"},{"title":"Get a role","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml get /v1/organization/roles/{roleId}","href":"/api-reference/roles/get-a-role"},{"title":"Update a custom role","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml put /v1/organization/roles/{roleId}","href":"/api-reference/roles/update-a-custom-role"},{"title":"Delete a custom role","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml delete /v1/organization/roles/{roleId}","href":"/api-reference/roles/delete-a-custom-role"}]},{"group":"Role assignments","pages":[{"title":"List role assignments","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml get /v1/organization/role-assignments","href":"/api-reference/role-assignments/list-role-assignments"},{"title":"Assign a role","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml post /v1/organization/role-assignments","href":"/api-reference/role-assignments/assign-a-role"},{"title":"Revoke a role","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml delete /v1/organization/role-assignments/{roleId}/{principalType}/{principalId}","href":"/api-reference/role-assignments/revoke-a-role"}]},{"group":"Permission catalog","pages":[{"title":"Get the permission catalog","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml get /v1/organization/permission-catalog","href":"/api-reference/permission-catalog/get-the-permission-catalog"}]},{"group":"Preferences","pages":[{"title":"Get a user's home dashboard","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml get /v1/organization/users/{userId}/preferences/home-dashboard","href":"/api-reference/preferences/get-a-users-home-dashboard"},{"title":"Set a user's home dashboard","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml put /v1/organization/users/{userId}/preferences/home-dashboard","href":"/api-reference/preferences/set-a-users-home-dashboard"},{"title":"Clear a user's home dashboard","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml delete /v1/organization/users/{userId}/preferences/home-dashboard","href":"/api-reference/preferences/clear-a-users-home-dashboard"},{"title":"Get a user's navigation","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml get /v1/organization/users/{userId}/preferences/navigation","href":"/api-reference/preferences/get-a-users-navigation"},{"title":"Set a user's navigation","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml put /v1/organization/users/{userId}/preferences/navigation","href":"/api-reference/preferences/set-a-users-navigation"},{"title":"Clear a user's navigation","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml delete /v1/organization/users/{userId}/preferences/navigation","href":"/api-reference/preferences/clear-a-users-navigation"},{"title":"Get a user group's home dashboard","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml get /v1/organization/user-groups/{groupId}/preferences/home-dashboard","href":"/api-reference/preferences/get-a-user-groups-home-dashboard"},{"title":"Set a user group's home dashboard","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml put /v1/organization/user-groups/{groupId}/preferences/home-dashboard","href":"/api-reference/preferences/set-a-user-groups-home-dashboard"},{"title":"Clear a user group's home dashboard","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml delete /v1/organization/user-groups/{groupId}/preferences/home-dashboard","href":"/api-reference/preferences/clear-a-user-groups-home-dashboard"},{"title":"Get a user group's navigation","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml get /v1/organization/user-groups/{groupId}/preferences/navigation","href":"/api-reference/preferences/get-a-user-groups-navigation"},{"title":"Set a user group's navigation","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml put /v1/organization/user-groups/{groupId}/preferences/navigation","href":"/api-reference/preferences/set-a-user-groups-navigation"},{"title":"Clear a user group's navigation","deprecated":null,"version":null,"openapi":"/api-reference/organization-openapi.yaml delete /v1/organization/user-groups/{groupId}/preferences/navigation","href":"/api-reference/preferences/clear-a-user-groups-navigation"}]}]},{"group":"SCIM API","pages":[{"group":"Discovery","pages":[{"title":"Supported SCIM protocol features","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml get /v1/organization/scim/v2/ServiceProviderConfig","href":"/api-reference/discovery/supported-scim-protocol-features"},{"title":"List supported resource types","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml get /v1/organization/scim/v2/ResourceTypes","href":"/api-reference/discovery/list-supported-resource-types"},{"title":"Get one resource type","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml get /v1/organization/scim/v2/ResourceTypes/{resourceTypeId}","href":"/api-reference/discovery/get-one-resource-type"},{"title":"List attribute schemas","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml get /v1/organization/scim/v2/Schemas","href":"/api-reference/discovery/list-attribute-schemas"},{"title":"Get one attribute schema","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml get /v1/organization/scim/v2/Schemas/{schemaUri}","href":"/api-reference/discovery/get-one-attribute-schema"}]},{"group":"Users","pages":[{"title":"List or filter users","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml get /v1/organization/scim/v2/Users","href":"/api-reference/users/list-or-filter-users"},{"title":"Create or adopt a user","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml post /v1/organization/scim/v2/Users","href":"/api-reference/users/create-or-adopt-a-user"},{"title":"Get one user","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml get /v1/organization/scim/v2/Users/{userId}","href":"/api-reference/users/get-one-user"},{"title":"Replace a user","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml put /v1/organization/scim/v2/Users/{userId}","href":"/api-reference/users/replace-a-user"},{"title":"Deprovision a user","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml delete /v1/organization/scim/v2/Users/{userId}","href":"/api-reference/users/deprovision-a-user"},{"title":"Partially update a user","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml patch /v1/organization/scim/v2/Users/{userId}","href":"/api-reference/users/partially-update-a-user"},{"title":"Search users with a request body","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml post /v1/organization/scim/v2/Users/.search","href":"/api-reference/users/search-users-with-a-request-body"}]},{"group":"Groups","pages":[{"title":"List or filter groups","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml get /v1/organization/scim/v2/Groups","href":"/api-reference/groups/list-or-filter-groups"},{"title":"Create a group","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml post /v1/organization/scim/v2/Groups","href":"/api-reference/groups/create-a-group"},{"title":"Get one group","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml get /v1/organization/scim/v2/Groups/{groupId}","href":"/api-reference/groups/get-one-group"},{"title":"Replace a group","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml put /v1/organization/scim/v2/Groups/{groupId}","href":"/api-reference/groups/replace-a-group"},{"title":"Delete a group","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml delete /v1/organization/scim/v2/Groups/{groupId}","href":"/api-reference/groups/delete-a-group"},{"title":"Partially update a group","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml patch /v1/organization/scim/v2/Groups/{groupId}","href":"/api-reference/groups/partially-update-a-group"},{"title":"Search groups with a request body","deprecated":null,"version":null,"openapi":"/api-reference/scim-openapi.yaml post /v1/organization/scim/v2/Groups/.search","href":"/api-reference/groups/search-groups-with-a-request-body"}]}]}]},{"tab":"CLI reference","pages":[{"title":"CLI reference","href":"/cli-reference/introduction"}]},{"tab":"Changelog","pages":[{"title":"Changelog","href":"/changelog"}]},{"tab":"FAQs","hidden":true,"pages":[{"title":"FAQs","href":"/faqs"}]}]},"basePath":"","title":"Review an AWS access grant - Plerion, Simplify Cloud Security - documentation","buildId":"dpl_9VVk5y1P8k1ATeJguVngy9Q3cmbD","deploymentId":"dpl_9VVk5y1P8k1ATeJguVngy9Q3cmbD","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-DX1Meug0.js","utils-B_OMIQVC.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-ChxhRPMa.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-CuKvD8Iv.js","snippetPresets-C5d7p2hp.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-CfHcE8m4.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-C1zZV314.js","shallow-CmQhqCJn.js","getApiPlaygroundDisplay-YRo9s1O7.js","CodeSnippet-RN1MTdfk.js","CodeSnippets-DKLPHxJA.js","Page-BAvA99GL.js","getPastedJson-bz0M41mU.js","icon-CsmhpPrv.js","MethodPill-CNGsVE77.js","DuplicateIcon-DilfU_Z2.js","createIcon-BdsYzQck.js","DynamicMarkdown-CbqEDjbV.js","SectionHeading-O6hXpFCN.js","axios-vUo_bRtp.js","Markdown-nKm-uidQ.js","clsx-ClVdStUn.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-CIQkMg3R.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-ImrFS4Fy.js"]}