List credential policies
/credentials/{credential_id}/policiesReturns the policies in the credential's active policy revision, one item per policy.
A credential without policies returns an empty collection.
Autonomous mode: the API credential secret, sent as a bearer token. Credential secrets are identified by a fixed prefix.
In: header
Path Parameters
Header Parameters
Optional client-generated identifier of the request, up to 64 characters from [A-Za-z0-9._-]. Echoed back in the response and recorded in the request log; it never replaces the server-generated X-Request-Id.
length <= 64Response Body
application/json
application/json
application/json
application/json
application/json
curl -X GET "https://example.com/credentials/string/policies"{ "data": [ { "capabilities": [ "string" ], "id": "string", "object": "policy", "published_at": "2019-08-24T14:15:22Z", "published_by": { "id": "string", "kind": "admin" }, "resources": [ { "ids": [ "string" ], "include_future": true, "parent": "string", "selector": "instance", "type": "instance" } ], "version": 0 } ]}Delete a credential DELETE
Deletes a revoked or expired credential. After deletion, the credential is no longer returned by the API, while audit records that reference it are preserved. Credentials that are still valid cannot be deleted and return the `state_conflict` error code. Revoke the credential with the update operation first. A credential cannot delete itself.
Add a credential policy POST
Adds a policy to a credential. The change publishes a new policy revision containing the existing policies plus the new one. Permissions listed in `capabilities` that the calling credential cannot delegate, including the non-delegable `credentials.*` and `administrators.*` permissions, are rejected with `delegation_limit_exceeded`, and no new revision is published. A credential cannot modify its own policies, and the policies of a revoked credential cannot be changed (`credential_revoked`).