v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-14117758.9 KB

Grants permission to revoke an OAuth 2.0 refresh token and its associated refresh tokens

Revokes a refresh_token issued by AWS Sign-In, invalidating the entire token chain so that the refresh_token can no longer be used to mint new access_tokens.

Idempotency: revoking an already-revoked, expired, or otherwise invalid token still returns 200 OK with an empty body. Only the refresh_token type is accepted.

post/v1/revoke#x-amz-client-auth-method=iam

Query parameters

x-amz-client-auth-method'iam' required

Request body

tokenstring password required

Refresh token string submitted for revocation. Must be an AWS Sign-In refresh_token (prefix "ASOR").

Response

Success

RevokeOAuth2TokenWithIAMResponse required
<p>Output structure for RevokeOAuth2TokenWithIAM operation</p> <p>RFC 7009 §2.2 revocation response. The endpoint returns 200 OK with an empty body on success; there are no response fields.</p>