---
title: "POST /identities/CreateWorkloadIdentity"
method: POST
path: "/identities/CreateWorkloadIdentity"
---

# POST /identities/CreateWorkloadIdentity

`POST /identities/CreateWorkloadIdentity`

Creates a new workload identity.

## Request body

- object
  - `name` string, required — The name of the workload identity. The name must be unique within your account.
  - `allowedResourceOauth2ReturnUrls` ResourceOauth2ReturnUrlType[] — The list of allowed OAuth2 return URLs for resources associated with this workload identity.
  - `tags` object — A map of tag keys and values to assign to the workload identity. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment.

## Response `201`

Success

- CreateWorkloadIdentityResponse
  - `name` string, required — The name of the workload identity.
  - `workloadIdentityArn` string, required — The Amazon Resource Name (ARN) of the workload identity.
  - `allowedResourceOauth2ReturnUrls` ResourceOauth2ReturnUrlType[] — The list of allowed OAuth2 return URLs for resources associated with this workload identity.

## Other responses

- `480` — UnauthorizedException
- `481` — ValidationException
- `482` — AccessDeniedException
- `483` — ResourceNotFoundException
- `484` — ThrottlingException
- `485` — InternalServerException

---

[API](https://skmtc.net/aws/apis/bedrock-agentcore-control.md) · [All operations](https://skmtc.net/aws/apis/bedrock-agentcore-control/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/bedrock-agentcore-control/versions/0ebde766792b/schema)