APIs.io Engineering Platform AWS Identity and Access Management — #Action=CreateRole

naftiko: 1.0.0-alpha2
info:
  label: 'APIs.io Engineering Platform AWS Identity and Access Management — #Action=CreateRole'
  description: 'APIs.io Engineering Platform AWS Identity and Access Management — #Action=CreateRole. 2 operations. Lead operation:
    #Action=CreateRole. Self-contained Naftiko capability covering one Engineering Platform business surface.'
  tags:
  - Engineering Platform
  - '#Action=CreateRole'
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    ENGINEERING_PLATFORM_API_KEY: ENGINEERING_PLATFORM_API_KEY
capability:
  consumes:
  - type: http
    namespace: aws-iam-action-createrole
    baseUri: https://iam.amazonaws.com
    description: 'APIs.io Engineering Platform AWS Identity and Access Management — #Action=CreateRole business capability.
      Self-contained, no shared references.'
    resources:
    - name: '#Action=CreateRole'
      path: /#Action=CreateRole
      operations:
      - name: getcreaterole
        method: GET
        description: Creates a new role for your Amazon Web Services account. For more information about roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html">IAM
          roles</a>. For information about quotas for role names and t
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Path
          in: query
          type: string
          description: <p> The path to the role. For more information about paths, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html">IAM
            Identifier
        - name: RoleName
          in: query
          type: string
          description: <p>The name of the role to create.</p> <p>IAM user, group, role, and policy names must be unique within
            the account. Names are not distinguished by case. For ex
          required: true
        - name: AssumeRolePolicyDocument
          in: query
          type: string
          description: <p>The trust relationship policy document that grants an entity permission to assume the role.</p>
            <p>In IAM, you must provide a JSON policy that has been conve
          required: true
        - name: Description
          in: query
          type: string
          description: A description of the role.
        - name: MaxSessionDuration
          in: query
          type: integer
          description: <p>The maximum session duration (in seconds) that you want to set for the specified role. If you do
            not specify a value for this setting, the default value of o
        - name: PermissionsBoundary
          in: query
          type: string
          description: <p>The ARN of the managed policy that is used to set the permissions boundary for the role.</p> <p>A
            permissions boundary policy defines the maximum permissions
        - name: Tags
          in: query
          type: array
          description: <p>A list of tags that you want to attach to the new role. Each tag consists of a key name and an associated
            value. For more information about tagging, see <a h
        - name: Action
          in: query
          type: string
          required: true
        - name: Version
          in: query
          type: string
          required: true
      - name: postcreaterole
        method: POST
        description: Creates a new role for your Amazon Web Services account. For more information about roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html">IAM
          roles</a>. For information about quotas for role names and t
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: Action
          in: query
          type: string
          required: true
        - name: Version
          in: query
          type: string
          required: true
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    authentication:
      type: apikey
      key: Authorization
      value: '{{env.ENGINEERING_PLATFORM_API_KEY}}'
      placement: header
  exposes:
  - type: rest
    namespace: aws-iam-action-createrole-rest
    port: 8080
    description: 'REST adapter for APIs.io Engineering Platform AWS Identity and Access Management — #Action=CreateRole. One
      Spectral-compliant resource per consumed operation, prefixed with /v1.'
    resources:
    - path: /v1/action-createrole
      name: action-createrole
      description: 'REST surface for #Action=CreateRole.'
      operations:
      - method: GET
        name: getcreaterole
        description: Creates a new role for your Amazon Web Services account. For more information about roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html">IAM
          roles</a>. For information about quotas for role names and t
        call: aws-iam-action-createrole.getcreaterole
        with:
          Path: rest.Path
          RoleName: rest.RoleName
          AssumeRolePolicyDocument: rest.AssumeRolePolicyDocument
          Description: rest.Description
          MaxSessionDuration: rest.MaxSessionDuration
          PermissionsBoundary: rest.PermissionsBoundary
          Tags: rest.Tags
          Action: rest.Action
          Version: rest.Version
        outputParameters:
        - type: object
          mapping: $.
      - method: POST
        name: postcreaterole
        description: Creates a new role for your Amazon Web Services account. For more information about roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html">IAM
          roles</a>. For information about quotas for role names and t
        call: aws-iam-action-createrole.postcreaterole
        with:
          Action: rest.Action
          Version: rest.Version
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: aws-iam-action-createrole-mcp
    port: 9090
    transport: http
    description: 'MCP adapter for APIs.io Engineering Platform AWS Identity and Access Management — #Action=CreateRole. One
      tool per consumed operation, routed inline through this capability''s consumes block.'
    tools:
    - name: creates-new-role-your-amazon
      description: Creates a new role for your Amazon Web Services account. For more information about roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html">IAM
        roles</a>. For information about quotas for role names and t
      hints:
        readOnly: true
        destructive: false
        idempotent: true
      call: aws-iam-action-createrole.getcreaterole
      with:
        Path: tools.Path
        RoleName: tools.RoleName
        AssumeRolePolicyDocument: tools.AssumeRolePolicyDocument
        Description: tools.Description
        MaxSessionDuration: tools.MaxSessionDuration
        PermissionsBoundary: tools.PermissionsBoundary
        Tags: tools.Tags
        Action: tools.Action
        Version: tools.Version
      outputParameters:
      - type: object
        mapping: $.
    - name: creates-new-role-your-amazon-2
      description: Creates a new role for your Amazon Web Services account. For more information about roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html">IAM
        roles</a>. For information about quotas for role names and t
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: aws-iam-action-createrole.postcreaterole
      with:
        Action: tools.Action
        Version: tools.Version
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.