---
title: "POST /domain"
method: POST
path: "/domain"
---

# POST /domain

`POST /domain`

Creates a new Domain for managing HealthAgent resources.

## Request body

- object
  - `name` string, required — The name for the new Domain.
  - `kmsKeyArn` string — The ARN of the KMS key to use for encrypting data in this Domain.
  - `webAppSetupConfiguration` object — Input configuration for creating a web application. Used only in CreateDomain operation input.
    - `ehrRole` string — ARN of the IAM role used for EHR operations.
    - `idcInstanceId` string — The Identity Center instance ID to use for creating the application.
    - `idcRegion` string — The AWS region where Identity Center is configured.
  - `tags` object — Tags to associate with the Domain.

## Response `201`

Success

- CreateDomainOutput
  - `domainId` string, required — <p/>
  - `arn` string, required — <p/>
  - `name` string, required — <p/>
  - `kmsKeyArn` string — <p/>
  - `encryptionContext` object — <p/>
    - `encryptionType` 'AWS_OWNED_KEY' | 'CUSTOMER_MANAGED_KEY', required — The type of encryption key used.
    - `kmsKeyArn` string — The ARN of the KMS key. Only present when encryptionType is CUSTOMER_MANAGED_KEY.
  - `status` 'ACTIVE' | 'DELETING' | 'DELETED', required — <p/>
  - `webAppUrl` string — <p/>
  - `webAppConfiguration` object — <p/>
    - `ehrRole` string, required — ARN of the IAM role used for EHR operations.
    - `idcApplicationId` string, required — The Identity Center application ID associated with this Domain.
    - `idcRegion` string, required — The AWS region where Identity Center is configured.
  - `createdAt` string, date-time, required — <p/>

## Other responses

- `480` — ServiceQuotaExceededException

---

[API](https://skmtc.net/aws/apis/connecthealth.md) · [All operations](https://skmtc.net/aws/apis/connecthealth/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/connecthealth/versions/6d56dfa0455c/schema)