---
title: "GET /v2/agentspaces/{agentSpaceId}/operator"
method: GET
path: "/v2/agentspaces/{agentSpaceId}/operator"
---

# GET /v2/agentspaces/{agentSpaceId}/operator

`GET /v2/agentspaces/{agentSpaceId}/operator`

Get the full auth configuration of operator including any enabled auth flow

## Path parameters

- `agentSpaceId` string, required — Unique identifier for an agent space (allows alphanumeric characters and hyphens; 1-64 characters)

## Response `200`

Success

- GetOperatorAppOutput — Output containing the Operator App configuration including authentication details.
  - `operatorAppUrl` string — The URL for operators to access the Operator App
  - `iam` IamAuthConfiguration — Configuration for IAM-based authentication flow for the Operator App.
    - `operatorAppRoleArn` string, required — The IAM role end users assume to access AIDevOps APIs
    - `createdAt` string, date-time, required — The timestamp when the Operator App IAM auth flow was enabled.
    - `updatedAt` string, date-time — The timestamp when the Operator App IAM auth flow was updated.
  - `idc` IdcAuthConfiguration — Configuration for AWS Identity Center (IdC) authentication flow for the Operator App.
    - `operatorAppRoleArn` string, required — The IAM role end users assume to access AIDevOps APIs
    - `idcInstanceArn` string, required — The IdC instance Arn used to create an IdC auth application
    - `idcApplicationArn` string — The IdC application Arn created for IdC auth
    - `createdAt` string, date-time, required — The timestamp when the Operator App IdC auth flow was enabled.
    - `updatedAt` string, date-time — The timestamp when the Operator App IdC auth flow was updated.
  - `idp` IdpAuthConfiguration — Configuration for external Identity Provider OIDC authentication flow for the Operator App.
    - `issuerUrl` string, required — The OIDC issuer URL of the external Identity Provider
    - `clientId` string, required — The OIDC client ID for the IdP application
    - `operatorAppRoleArn` string, required — The IAM role end users assume to access AIDevOps APIs
    - `provider` string, required — The Identity Provider name (e.g., Entra, Okta, Google)
    - `createdAt` string, date-time, required — The timestamp when the Operator App IdP auth flow was enabled.
    - `updatedAt` string, date-time — The timestamp when the Operator App IdP auth flow was updated.

## Other responses

- `480` — ValidationException
- `481` — ContentSizeExceededException
- `482` — ServiceQuotaExceededException
- `483` — ConflictException
- `484` — InternalServerException
- `485` — AccessDeniedException
- `486` — ThrottlingException
- `487` — InvalidParameterException
- `488` — ResourceNotFoundException

---

[API](https://skmtc.net/aws/apis/devops-agent.md) · [All operations](https://skmtc.net/aws/apis/devops-agent/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/devops-agent/versions/ca2af02d3853/schema)