---
title: "Get AWS role configuration for role-based authentication"
method: GET
path: "/v1/projects/{projectOrProductUID}/aws-role-config"
tags: ["project"]
---

# Get AWS role configuration for role-based authentication

`GET /v1/projects/{projectOrProductUID}/aws-role-config`

Returns the AWS Account ID and External ID needed to configure an IAM role
trust policy for role-based authentication on AWS routes.

## Path parameters

- `projectOrProductUID` string, required

## Response `200`

AWS role configuration

- AWSRoleConfig — Configuration needed to set up an IAM role trust policy for role-based authentication on AWS routes
  - `aws_account_id` string, required — The Blues AWS Account ID to trust in your IAM role's trust policy
  - `external_id` string, required — The External ID to use in your IAM role's trust policy condition

## Other responses

- `default` — The response body in case of an API error.

## Changes

- **2026-07-10** `1887e880199a` — 1 breaking, 6 info
  - the response's body type/format changed from ``/`` to `object`/`` for status `default`
  - added the optional property `debug` to the response with the `default` status
  - added the optional property `details` to the response with the `default` status
  - added the optional property `request` to the response with the `default` status
  - …3 more
- **2026-02-23** `988ab8914be8` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/notefile/apis/notehub-api/changes/v1/projects/:projectOrProductUID/aws-role-config/get.md)

---

[API](https://skmtc.dev/notefile/apis/notehub-api.md) · [All operations](https://skmtc.dev/notefile/apis/notehub-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/notefile/notehub-api/revisions/9c5b2b63a991/schema)