---
title: "Re-probe one account's console-access policy version"
method: POST
path: "/v1/account/console-policy/{awsAccountId}/recheck"
tags: ["account"]
---

# Re-probe one account's console-access policy version

`POST /v1/account/console-policy/{awsAccountId}/recheck`

## Request

- Base URL: `https://api.wraps.dev`
- URL: `https://api.wraps.dev/v1/account/console-policy/{awsAccountId}/recheck`
- Auth: HTTP bearer

Assumes the account's wraps-console-access-role and probes which version of the Wraps console policy it carries, then persists the reading. Exists so a customer who has just repaired their role sees it reflected immediately rather than waiting for the hourly sweep, which does not re-probe an account it checked within the last day. Rate limited to one probe per account per minute; inside that window, or when SES throttles the probe, the stored reading is returned with `rechecked: false`.

## Path parameters

- `awsAccountId` string, required

## Response `200`

- object
  - `version` number, required
  - `currentVersion` number, required
  - `upToDate` boolean, required
  - `checkedAt` string, required
  - `rechecked` boolean, required

## Other responses

- `400`: Malformed request — unparseable body or an invalid parameter.
- `401`: Missing, malformed, or revoked credentials. Send `Authorization: Bearer <api key>`.
- `403`: Authenticated, but the resource belongs to another organization.
- `404`: No such route, or no such resource in this organization.
- `422`: The request parsed but failed schema validation.
- `429`: Rate limit exceeded. Wait for the window named by the RateLimit headers.
- `500`: Unexpected server failure. Safe to retry with backoff; quote `requestId` if it persists.

---

[API](https://skmtc.dev/wraps/apis/wraps-platform-api.md) · [All operations](https://skmtc.dev/wraps/apis/wraps-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/wraps/apis/wraps-platform-api/revisions/12116fb21af7?raw)
