Get an AWS account

GET 
/aws-accounts/:accountId

Returns one registered AWS account in full: the identity provider fields the list view leaves out, the owner list, the last-sync time, the last onboarding error and the timestamps.

Everything here is Prism's own record. Nothing is read back from AWS, so this tells you what Prism believes about the account, not what is actually configured inside it.

One field is not what it appears: external_id is always an empty string here, whatever is stored.

Request

Responses

200

The account.

401

Authentication failed: the X-API-Token header was missing, malformed, expired or not recognised.

This response is text/plain, not JSON. It is written by http.Error in the authentication middleware, which runs before any handler and therefore before anything that would build a JSON envelope. A client that unconditionally JSON-parses response bodies will fail on this one, so check the status code first.

403

The token is valid, but it is not allowed to act on this tenant.

An API token is minted inside one tenant and stays bound to it for life. Sending it to a path whose tenant segment names a different tenant is refused here, in middleware, before the operation runs, so this says nothing about the resource you asked for, only about which tenant the path named. Check the tenant server variable against the console the token was created in.

404

No account with this number is registered in your tenant: either it never was, it belongs to another tenant, or it has been deleted. Nothing in this response distinguishes those cases. You will also land here if you passed the account's id instead of its account_id.

500

The account could not be read from the database.