---
title: "POST /allow-lists"
method: POST
path: "/allow-lists"
---

# POST /allow-lists

`POST /allow-lists`

Creates and defines the settings for an allow list.

## Request body

- object
  - `clientToken` string, required — A unique, case-sensitive token that you provide to ensure the idempotency of the request.
  - `criteria` object, required — Specifies the criteria for an allow list. The criteria must specify a regular expression (regex) or an S3 object (s3WordsList). It can't specify both.
    - `regex` string — The regular expression (<i>regex</i>) that defines the text pattern to ignore. The expression can contain as many as 512 characters.
    - `s3WordsList` object — The location and name of the S3 object that lists specific text to ignore.
      - `bucketName` string, required — The full name of the S3 bucket that contains the object.
      - `objectKey` string, required — The full name (key) of the object.
  - `description` string — A custom description of the allow list. The description can contain as many as 512 characters.
  - `name` string, required — A custom name for the allow list. The name can contain as many as 128 characters.
  - `tags` object — A string-to-string map of key-value pairs that specifies the tags (keys and values) for an Amazon Macie resource.

## Response `200`

Success

- CreateAllowListResponse
  - `arn` string — The Amazon Resource Name (ARN) of the allow list.
  - `id` string — The unique identifier for the allow list.

## Other responses

- `480` — ValidationException
- `481` — InternalServerException
- `482` — ServiceQuotaExceededException
- `483` — AccessDeniedException
- `484` — ResourceNotFoundException
- `485` — ThrottlingException
- `486` — ConflictException

---

[API](https://skmtc.net/aws/apis/macie2.md) · [All operations](https://skmtc.net/aws/apis/macie2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/macie2/versions/6252cf55d8ef/schema)