Get a permission set
GET/permission-sets/:id
Returns one permission set in full: every attached AWS-managed policy ARN, every inline policy document, the attribute map, and the customer-managed policies and policy references attached to it.
This is the only operation in this group that returns a populated
realm; POST and PUT always report it as an empty string. It is also
the authoritative view after a PUT, whose response largely echoes the
request body back instead of re-reading what was stored.
Request
Responses
- 200
- 401
- 403
- 404
- 500
The permission set.
Authentication failed: the X-API-Token header was missing, malformed,
expired or not recognised.
This response is text/plain, not JSON. It is written by
http.Error in the authentication middleware, which runs before any
handler and therefore before anything that would build a JSON envelope.
A client that unconditionally JSON-parses response bodies will fail on
this one, so check the status code first.
The token is valid, but it is not allowed to act on this tenant.
An API token is minted inside one tenant and stays bound to it for life.
Sending it to a path whose tenant segment names a different tenant is
refused here, in middleware, before the operation runs, so this says
nothing about the resource you asked for, only about which tenant the
path named. Check the tenant server variable against the console the
token was created in.
No permission set with this id exists in your tenant: either it never did, it belongs to another tenant, or it has been deleted. Nothing in this response distinguishes those cases, and a tenant segment that names no tenant reports the same way.
The permission set could not be read from the database.