---
title: "Retrieve a connection"
method: GET
path: "/cloudflow/v1/connections/{connectionId}"
tags: ["Connections"]
---

# Retrieve a connection

`GET /cloudflow/v1/connections/{connectionId}`

Returns a single connection by ID.

## Path parameters

- `connectionId` string, required

## Response `200`

OK

- CloudflowConnection — A cloud provider connection used in CloudFlow workflows.
  - `connectionId` string — Unique identifier for the connection.
  - `name` string
  - `description` string
  - `gcpConfig` object — Response extends request schema with server-owned read-only fields.
    - `organizationId` string
    - `folderId` string
    - `projectId` string
    - `level` 'organization' | 'folder' | 'project'
    - `serviceAccountName` string
    - `predefinedRoles` string[]
    - `customRole` object
      - `roleId` string
      - `permissions` string[]
    - `infraManagerProject` string
    - `infraManagerLocation` string
    - `infraManagerServiceAccount` string
    - `status` string — Server-managed GCP config status.
    - `deploymentCommand` string — Generated deployment command.
  - `awsConfig` object — Response extends request schema with server-owned read-only fields.
    - `context` object[]
      - `accountId` string
      - `regions` string[]
      - `status` string — Server-managed per-account deployment status.
    - `roleName` string
    - `permissions` object
    - `managementAccount` string
    - `organizationRootId` string
    - `scopeTargetedOrganizationalUnitIds` string[]
    - `scopeExplicitAccountIds` string[]
    - `scopeExcludedAccountIds` string[]
    - `scopeManagementAccountExplicitInScope` boolean
  - `collaborators` CloudflowCollaborator[]
    - `email` string, email
    - `role` 'owner' | 'editor' | 'user'
  - `enabled` boolean — false when the connection is disabled.
  - `status` string — Overall connection status.
  - `createdAt` string, date-time
  - `updatedAt` string, date-time

## Other responses

- `400` — Bad Request - The server cannot process the request, often due to a malformed request.
- `401` — Unauthorized - Invalid API key.
- `403` — Forbidden - The client is not authorized to perform the request.
- `404` — Not Found - The requested resource does not exist.
- `500` — Internal Server Error - Something went wrong with the DoiT API server.

---

[API](https://skmtc.dev/doit/apis/doit-cloud-intelligence.md) · [All operations](https://skmtc.dev/doit/apis/doit-cloud-intelligence/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/doit/doit-cloud-intelligence/revisions/9416402fc119/schema)