---
title: "Get an AWS account"
method: GET
path: "/core/v1/cloudconnect/aws/accounts/{accountID}"
tags: ["Cloud Connect"]
---

# Get an AWS account

`GET /core/v1/cloudconnect/aws/accounts/{accountID}`

Returns the current state of an AWS account including role, supported features, and optional S3 bucket configuration.

## Response `200`

OK - Account details returned successfully.

- AwsAccountResponse
  - `accountID` string — The AWS account ID.
  - `roleArn` string — The ARN of the IAM role.
  - `s3Bucket` string — S3 bucket name for real-time anomaly detection. Present only if real-time is enabled.
  - `s3BucketRegion` string — AWS region of the S3 bucket. Present only if s3Bucket exists.
  - `supportedFeatures` AwsSupportedFeature[] — List of supported features and their permission status.
    - `name` string — Feature name.
    - `hasRequiredPermissions` boolean — Whether the role has the required permissions for this feature.
  - `enabledFeatures` string[] — List of supported AWS features enabled by the caller. Returned in the same order as provided.
  - `timeLinked` string — ISO 8601 timestamp of when the role was linked.

## Other responses

- `400` — Bad Request - The server cannot process the request, often due to a malformed request.
- `401` — Unauthorized - Invalid API key.
- `403` — Forbidden - The client is not authorized to perform the request.
- `404` — Not Found - No CloudConnect document found for this account.
- `500` — Internal Server Error - Something went wrong with the DoiT API server.

---

[API](https://skmtc.dev/doit/apis/doit-cloud-intelligence.md) · [All operations](https://skmtc.dev/doit/apis/doit-cloud-intelligence/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/doit/doit-cloud-intelligence/revisions/9416402fc119/schema)