---
title: "Create a short-lived broker setup token from customer cloud attestation"
method: POST
path: "/onprem/v1/setup-authorizations"
tags: ["onprem", "onprem", "__public__"]
---

# Create a short-lived broker setup token from customer cloud attestation

`POST /onprem/v1/setup-authorizations`

## Request body

- SetupAuthorizationCreateRequest
  - `cloud_provider` 'aws' | 'gcp' | 'azure', required — Customer cloud target proving account control
  - `requested_slug` string, nullable
  - `release_version` string, nullable
  - `cloud_attestation` SetupCloudAttestation, required
    - `type` 'aws_presigned_sts_get_caller_identity' | 'gcp_oidc_identity_token' | 'azure_entra_access_token', required
    - `payload` object

## Response `201`

Success

- SuccessResponseSetupAuthorizationResponse
  - `success` true, required — Flag for it request was successful
  - `data` SetupAuthorizationResponse, required
    - `authorization_id` string, required
    - `setup_token` string, required — Short-lived setup token. Returned once; never stored raw.
    - `expires_at` string, date-time, required
    - `cloud_provider` 'aws' | 'gcp' | 'azure', required
    - `cloud_account` string, required
    - `cloud_principal` string, nullable
  - `meta` ResponseMeta
    - `requestId` string — Unique request identifier for tracing
    - `timestamp` string, date-time — Response timestamp (UTC)
    - `durationMs` integer, nullable — Request processing time in milliseconds

## Other responses

- `400` — Validation Bad Request
- `401` — Auth Invalid Token
- `403` — Forbidden Insufficient Permissions
- `409` — Resource Conflict
- `422` — Validation Failed
- `426` — Business Quota Exceeded
- `500` — Internal Error

---

[API](https://skmtc.dev/definite/apis/defapi.md) · [All operations](https://skmtc.dev/definite/apis/defapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/definite/defapi/revisions/3943d8deb3be/schema)