Skip to main content
POST
Connect a cloud

Authorizations

Authorization
string
header
required

Developer API token (asa_...), created by an organization owner in the dashboard.

Body

application/json
cloud
enum<string>
required

Cloud name

Available options:
aws,
gcp,
azure
credentials
object
required

The cloud's credentials. For aws: access_key, secret_key and optionally region. For gcp: the fields of the service account key file, and optionally region (a zone or a region). For azure: subscription_id, tenant_id, client_id, client_secret and optionally region.

Response

OK

accountId
string | null
required

The cloud's own account identifier: an AWS account ID, a Google Cloud project ID or an Azure subscription ID

cloud
enum<string>
required

Cloud name

Available options:
aws,
gcp,
azure
connectedAt
string<date-time>
required

When it was connected

defaultRegion
string
required

The region runners launch in when a runner definition names none; on Google Cloud, a zone or a region

error
string | null
required

Why the credential stopped working

identity
string
required

The public half of the credential: an AWS access key ID, a Google Cloud service account email or an Azure application ID

principal
string | null
required

Who the credential is, such as an IAM user's ARN

status
enum<string>
required

Whether the credential works

Available options:
ok,
invalid
updatedAt
string<date-time>
required

When it was last changed

verifiedAt
string<date-time> | null
required

When it was last verified with the cloud