---
title: "Create AWS key with keyless authentication"
method: POST
path: "/business/aws-keys/keyless"
tags: ["Aws Keys"]
---

# Create AWS key with keyless authentication

`POST /business/aws-keys/keyless`

## Request

- Base URL: `https://asm.cloud.tenable.com/api/1.0`
- URL: `https://asm.cloud.tenable.com/api/1.0/business/aws-keys/keyless`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/tenable/apis/attack-surface-management/docs/business/aws-keys/keyless/post.ts> (a function with typed inputs; its response is checked against the schema)

Creates a new AWS (Amazon Web Services) integration with keyless authentication in the business of the current user.

## Request body

- object
  - `name` string, required: A name for the AWS key.
  - `role_arn` string, required: The ARN of the AWS Role that can be assumed by ASM during the ingestion of the AWS cloud assets.

## Response `200`

Returned if Tenable Attack Surface Management successfully created the AWS key.

- object
  - `id` number, required: The ID of the newly created AWS key.
  - `external_id` string, required: The External ID that the integration is going to use during the role assumption.

## Other responses

- `401`: Returned if you do not have permissions to create an AWS key.
- `500`: Returned if an internal error occurred in Tenable Attack Surface Management.

---

[API](https://skmtc.dev/tenable/apis/attack-surface-management.md) - [All operations](https://skmtc.dev/tenable/apis/attack-surface-management/llms.txt) - [OpenAPI document](https://skmtc.dev/tenable/apis/attack-surface-management/revisions/465c06285e48?raw)