---
title: "Create AWS Credential"
method: POST
path: "/v1/credentials/aws"
tags: ["Cloud"]
---

# Create AWS Credential

`POST /v1/credentials/aws`

Create a new credential for AWS. The external ID generated in the request to Get AWS External ID will be retrieved and included in the request to AWS automatically.

## Request body

- AddAwsCredentialRequest
  - `name` string, required — The name to give the created credential
  - `arn` string, required — The AWS resource identifier with which the trust relationship was formed via the external ID
  - `orgMemberAccountRoleName` string — When provided, the IAM role that exists in each of your AWS member accounts to be included by Lucid when making requests on your behalf

## Response `201`

Created. Returns the newly created AWS credential.

- AwsCredentialObject
  - `credentialId` string, required — AWS credential ID
  - `type` 'aws', required
  - `params` object, required
    - `name` string, required — Name of the credential
    - `arn` string, required — The AWS resource identifier corresponding to the credential
    - `orgMemberAccountRoleName` string, required — If not null, then the IAM role that exists in each of your AWS member accounts that was included by Lucid when making requests on your behalf to create or update the credential

## Other responses

- `400` — Bad Request. Occurs when the ARN or request parameters are invalid.

---

[API](https://skmtc.net/lucid/apis/lucid-rest-api.md) · [All operations](https://skmtc.net/lucid/apis/lucid-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lucid/lucid-rest-api/revisions/6a32cb9e1aa7/schema)