---
title: "POST /connector/create"
method: POST
path: "/connector/create"
---

# POST /connector/create

`POST /connector/create`

Creates a connector that links an external cloud provider to Amazon Inspector for vulnerability scanning.

## Request body

- object
  - `clientToken` string — A unique, case-sensitive identifier that you provide to ensure that the operation completes no more than one time. If this token matches a previous request, the service ignores the request but does not return an error.
  - `name` string, required — The name of the connector.
  - `provider` 'AZURE', required — The cloud provider for the connector.
  - `description` string — A description of the connector.
  - `providerDetail` object, required — The provider-specific configuration details for creating a connector.
    - `azure` object — The Azure-specific details for creating a connector.
      - `awsConfigConnectorArn` string, required — The ARN of the Amazon Web Services Config connector to associate with this connector.
      - `scopeConfiguration` object, required — The scope configuration that defines which Azure resources to scan.
        - `vmScanning` object — The scope configuration input for VM scanning.
          - `scopeType` 'TENANT' | 'SUBSCRIPTION', required — The type of scope. Valid values are <code>TENANT</code>, which scans all resources in the Azure tenant, and <code>SUBSCRIPTION</code>, which scans only the resources in the specified Azure subscriptions.
          - `scopeValues` ScopeValue[] — The list of scope values. For subscription-level scope, these are Azure subscription IDs.
        - `containerImageScanning` object — The scope configuration input for container image scanning.
          - `scopeType` 'TENANT' | 'SUBSCRIPTION', required — The type of scope. Valid values are <code>TENANT</code>, which scans all resources in the Azure tenant, and <code>SUBSCRIPTION</code>, which scans only the resources in the specified Azure subscriptions.
          - `scopeValues` ScopeValue[] — The list of scope values. For subscription-level scope, these are Azure subscription IDs.
        - `serverlessScanning` object — The scope configuration input for serverless scanning.
          - `scopeType` 'TENANT' | 'SUBSCRIPTION', required — The type of scope. Valid values are <code>TENANT</code>, which scans all resources in the Azure tenant, and <code>SUBSCRIPTION</code>, which scans only the resources in the specified Azure subscriptions.
          - `scopeValues` ScopeValue[] — The list of scope values. For subscription-level scope, these are Azure subscription IDs.
      - `azureRegions` AzureRegion[], required — The Azure regions to scan.
      - `autoInstallVMScanner` boolean — Specifies whether to automatically install the VM scanner on connected Azure resources. Defaults to <code>true</code>.
  - `tags` object — The tags to apply to the connector.

## Response `200`

Success

- CreateConnectorResponse
  - `connectorArn` string, required — The Amazon Resource Name (ARN) of the created connector.

## Other responses

- `480` — ServiceQuotaExceededException
- `481` — ConflictException
- `482` — ValidationException
- `483` — AccessDeniedException
- `484` — ThrottlingException
- `485` — InternalServerException

---

[API](https://skmtc.net/aws/apis/inspector2.md) · [All operations](https://skmtc.net/aws/apis/inspector2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/inspector2/versions/c51110c7cd43/schema)