---
title: "POST /update-auth-method-aws-iam"
method: POST
path: "/update-auth-method-aws-iam"
tags: ["Authentication"]
---

# POST /update-auth-method-aws-iam

`POST /update-auth-method-aws-iam`

## Request

- Base URL: `https://api.akeyless.io`
- URL: `https://api.akeyless.io/update-auth-method-aws-iam`
- Auth: none declared

## Request body

- UpdateAuthMethodAWSIAM: updateAuthMethodAWSIAM is a command that updates a new Auth Method that will be able to authenticate using AWS IAM credentials. [Deprecated: Use auth-method-update-aws-iam command]
  - `access-expires` integer: Access expiration date in Unix timestamp (select 0 for access without expiry date)
  - `allowed-client-type` string[]: limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
  - `audit-logs-claims` string[]: Subclaims to include in audit logs, e.g "--audit-logs-claims email --audit-logs-claims username"
  - `bound-arn` string[]: A list of full arns that the access is restricted to
  - `bound-aws-account-id` string[], required: A list of AWS account-IDs that the access is restricted to
  - `bound-ips` string[]: A CIDR whitelist with the IPs that the access is restricted to
  - `bound-resource-id` string[]: A list of full resource ids that the access is restricted to
  - `bound-role-id` string[]: A list of full role ids that the access is restricted to
  - `bound-role-name` string[]: A list of full role-name that the access is restricted to
  - `bound-user-id` string[]: A list of full user ids that the access is restricted to
  - `bound-user-name` string[]: A list of full user-name that the access is restricted to
  - `delete_protection` string: Protection from accidental deletion of this object [true/false]
  - `description` string: Auth Method description
  - `expiration-event-in` string[]: How many days before the expiration of the auth method would you like to be notified.
  - `force-sub-claims` boolean: if true: enforce role-association must include sub claims
  - `gw-bound-ips` string[]: A CIDR whitelist with the GW IPs that the access is restricted to
  - `json` boolean: Set output format to JSON
  - `jwt-ttl` integer: Jwt TTL
  - `name` string, required: Auth Method name
  - `new-name` string: Auth Method new name
  - `product-type` string[]: Choose the relevant product type for the auth method [sm, sra, pm, dp, ca, ara]
  - `sts-url` string: sts URL
  - `token` string: Authentication token (see `/auth` and `/configure`)
  - `uid-token` string: The universal identity token, Required only for universal_identity authentication
  - `unique-identifier` string: A unique identifier (ID) value which is a "sub claim" name that contains details uniquely identifying that resource. This "sub claim" is used to distinguish between different identities.

## Response `200`

updateAuthMethodAWSIAMResponse wraps response body.

- UpdateAuthMethodAWSIAMOutput

## Other responses

- `default`: errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.dev/akeyless/apis/identity-access.md) - [All operations](https://skmtc.dev/akeyless/apis/identity-access/llms.txt) - [OpenAPI document](https://skmtc.dev/akeyless/apis/identity-access/revisions/6fbc3858ec88?raw)