Assume IoT user role scoped to a subgroup

POST 
/v1/groups/:groupId/subgroups/:subGroupId/assumed-roles

Assumes an IoT user role scoped to the specified subgroup. The returned credentials are restricted to this subgroup only.

Open to any authenticated caller that can reach the subgroup: an admin caller or a member with full access to the group may name any subgroup of it (the subgroup must exist), while a member holding only shared subgroups may name one that was shared with it. Any other caller is refused with 403.

Request

Responses

200

Successful response with new credentials

400

Bad request - group not found or subgroup not found

401

Unauthorized - Invalid or missing authentication

403

Forbidden - the caller has no access to this group, or the subgroup was not shared with it

500

Internal server error