Sign in

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1484525.6 KB

Revokes the current client access token (CAT) and returns new CAT for clients to use when reconnecting to secure tunneling to access the same tunnel.

Requires permission to access the RotateTunnelAccessToken action.

Rotating the CAT doesn't extend the tunnel duration. For example, say the tunnel duration is 12 hours and the tunnel has already been open for 4 hours. When you rotate the access tokens, the new tokens that are generated can only be used for the remaining 8 hours.

post/#X-Amz-Target=IoTSecuredTunneling.RotateTunnelAccessToken

Headers

X-Amz-Target'IoTSecuredTunneling.RotateTunnelAccessToken' required

Request body

tunnelIdstring required

The tunnel for which you want to rotate the access tokens.

clientMode'SOURCE' | 'DESTINATION' | 'ALL' required

The mode of the client that will use the client token, which can be either the source or destination, or both source and destination.

Response

Success

tunnelArnstring

The Amazon Resource Name for the tunnel.

sourceAccessTokenstring password

The client access token that the source local proxy uses to connect to IoT Secure Tunneling.

destinationAccessTokenstring password

The client access token that the destination local proxy uses to connect to IoT Secure Tunneling.