---
title: "POST /v1/agentspaces/{agentSpaceId}/operator"
method: POST
path: "/v1/agentspaces/{agentSpaceId}/operator"
---

# POST /v1/agentspaces/{agentSpaceId}/operator

`POST /v1/agentspaces/{agentSpaceId}/operator`

Enable the Operator App to access the given AgentSpace

## Path parameters

- `agentSpaceId` string, required — Unique identifier for an agent space (allows alphanumeric characters and hyphens; 1-64 characters)

## Request body

- object
  - `authFlow` 'iam' | 'idc' | 'idp', required — Authentication flow type for operator app.
  - `operatorAppRoleArn` string, required — AWS IAM role ARN.
  - `idcInstanceArn` string — The IdC instance Arn used to create an IdC auth application
  - `issuerUrl` string — The OIDC issuer URL of the external Identity Provider
  - `idpClientId` string — Client ID for IdP OIDC authentication.
  - `idpClientSecret` string, password — Client secret for IdP OIDC authentication.
  - `provider` string — The Identity Provider name (e.g., Entra, Okta, Google)

## Response `200`

Success

- EnableOperatorAppOutput — Output containing the enabled Operator App configuration.
  - `agentSpaceId` string, required — The unique identifier of the AgentSpace
  - `operatorAppUrl` string — The URL for operators to access the Operator App
  - `iam` IamAuthConfiguration — Configuration for IAM-based authentication flow for the Operator App.
    - `operatorAppRoleArn` string, required — The IAM role end users assume to access AIDevOps APIs
    - `createdAt` string, date-time, required — The timestamp when the Operator App IAM auth flow was enabled.
    - `updatedAt` string, date-time — The timestamp when the Operator App IAM auth flow was updated.
  - `idc` IdcAuthConfiguration — Configuration for AWS Identity Center (IdC) authentication flow for the Operator App.
    - `operatorAppRoleArn` string, required — The IAM role end users assume to access AIDevOps APIs
    - `idcInstanceArn` string, required — The IdC instance Arn used to create an IdC auth application
    - `idcApplicationArn` string — The IdC application Arn created for IdC auth
    - `createdAt` string, date-time, required — The timestamp when the Operator App IdC auth flow was enabled.
    - `updatedAt` string, date-time — The timestamp when the Operator App IdC auth flow was updated.
  - `idp` IdpAuthConfiguration — Configuration for external Identity Provider OIDC authentication flow for the Operator App.
    - `issuerUrl` string, required — The OIDC issuer URL of the external Identity Provider
    - `clientId` string, required — The OIDC client ID for the IdP application
    - `operatorAppRoleArn` string, required — The IAM role end users assume to access AIDevOps APIs
    - `provider` string, required — The Identity Provider name (e.g., Entra, Okta, Google)
    - `createdAt` string, date-time, required — The timestamp when the Operator App IdP auth flow was enabled.
    - `updatedAt` string, date-time — The timestamp when the Operator App IdP auth flow was updated.

## Other responses

- `480` — ValidationException
- `481` — IdentityCenterServiceException
- `482` — ContentSizeExceededException
- `483` — ServiceQuotaExceededException
- `484` — ConflictException
- `485` — InternalServerException
- `486` — AccessDeniedException
- `487` — ThrottlingException
- `488` — InvalidParameterException
- `489` — ResourceNotFoundException

---

[API](https://skmtc.net/aws/apis/devops-agent.md) · [All operations](https://skmtc.net/aws/apis/devops-agent/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/devops-agent/versions/ca2af02d3853/schema)