---
title: "PATCH /appbundles/{appBundleIdentifier}/appauthorizations/{appAuthorizationIdentifier}"
method: PATCH
path: "/appbundles/{appBundleIdentifier}/appauthorizations/{appAuthorizationIdentifier}"
---

# PATCH /appbundles/{appBundleIdentifier}/appauthorizations/{appAuthorizationIdentifier}

`PATCH /appbundles/{appBundleIdentifier}/appauthorizations/{appAuthorizationIdentifier}`

Updates an app authorization within an app bundle, which allows AppFabric to connect to an application.

If the app authorization was in a `connected` state, updating the app authorization will set it back to a `PendingConnect` state.

## Path parameters

- `appBundleIdentifier` string, required
- `appAuthorizationIdentifier` string, required

## Request body

- object
  - `credential` object — Contains credential information for an application.
    - `oauth2Credential` object — Contains OAuth2 client credential information.
      - `clientId` string, required — The client ID of the client application.
      - `clientSecret` string, password, required — The client secret of the client application.
    - `apiKeyCredential` object — Contains API key credential information.
      - `apiKey` string, password, required — An API key for an application.
  - `tenant` object — Contains information about an application tenant.
    - `tenantIdentifier` string — The ID of the application tenant.
    - `tenantDisplayName` string — The display name of the tenant.

## Response `200`

Success

- UpdateAppAuthorizationResponse
  - `appAuthorization` object, required — Contains information about an app authorization.
    - `appAuthorizationArn` string, required — The Amazon Resource Name (ARN) of the app authorization.
    - `appBundleArn` string, required — The Amazon Resource Name (ARN) of the app bundle for the app authorization.
    - `app` string, required — The name of the application.
    - `tenant` object, required — Contains information about an application tenant, such as the application display name and identifier.
      - `tenantIdentifier` string, required — The ID of the application tenant.
      - `tenantDisplayName` string, required — The display name of the tenant.
    - `authType` 'oauth2' | 'apiKey', required — The authorization type.
    - `status` 'PendingConnect' | 'Connected' | 'ConnectionValidationFailed' | 'TokenAutoRotationFailed', required — <p>The state of the app authorization.</p> <p>The following states are possible:</p> <ul> <li> <p> <code>PendingConnect</code>: The initial state of the app authorization. The app authorization is created but not yet connected.</p> </li> <li> <p> <code>Connected</code>: The app authorization is connected to the application, and is ready to be used.</p> </li> <li> <p> <code>ConnectionValidationFailed</code>: The app authorization received a validation exception when trying to connect to the application. If the app authorization is in this state, you should verify the configured credentials and try to connect the app authorization again.</p> </li> <li> <p> <code>TokenAutoRotationFailed</code>: AppFabric failed to refresh the access token. If the app authorization is in this state, you should try to reconnect the app authorization.</p> </li> </ul>
    - `createdAt` string, date-time, required — The timestamp of when the app authorization was created.
    - `updatedAt` string, date-time, required — The timestamp of when the app authorization was last updated.
    - `persona` 'admin' | 'endUser' — <p>The user persona of the app authorization.</p> <p>This field should always be <code>admin</code>.</p>
    - `authUrl` string — The application URL for the OAuth flow.

## Other responses

- `480` — InternalServerException
- `481` — ThrottlingException
- `482` — ValidationException
- `483` — ResourceNotFoundException
- `484` — AccessDeniedException

---

[API](https://skmtc.net/aws/apis/appfabric.md) · [All operations](https://skmtc.net/aws/apis/appfabric/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/appfabric/versions/b244e52fe0c9/schema)