Skip to main content
GET
List service account policies
Primary IAM action: workspace:ListServiceAccountPolicies. The same caller must also have iam:GetServiceAccount on the receiving account principal. The Workspace action applies to the target principal; permissions are not combined across separate credentials. See WORKSPACE permissions for policy examples.

Authorizations

Authorization
string
header
required

An OAuth 2.0 bearer token, sent as Authorization: Bearer <token>. This is the recommended way to authenticate.

Get one by exchanging a service account's access key pair at POST /v1/oauth/token with grant_type=client_credentials. It is the standard client-credentials grant, so any OAuth-aware library will obtain and refresh it for you.

Tokens last an hour by default. The same access key pair is separately your AWS SigV4 credential for the S3-compatible object endpoint, which speaks nothing else.

Path Parameters

service_account_id
string<uuid>
required

Service Account ID

Query Parameters

name
string

Exact resource name, combined with crn using AND before pagination. Empty values are filters. Resources without a name never match.

crn
string

Exact returned CRN, combined with name using AND before pagination. Malformed or empty CRNs return 400; valid mismatched or foreign CRNs return an empty page. Resources without a CRN never match. Organization-scoped CRNs use the authenticated organization.

Response

List of attached policies

policies
object[]