AWS APIs

148 APIs6,711 Endpoints16 Categories

API Catalog(9 of 148)

Amazon Detective

Jentic publishes the only available OpenAPI specification for Amazon Detective, keeping it validated and agent-ready. Amazon Detective uses machine learning and graph analytics to help security teams investigate potential security issues across AWS workloads. The API manages behavior graphs that aggregate CloudTrail, VPC flow logs, and GuardDuty findings from a set of member accounts, and lets the administrator account invite, accept, and remove members, configure organization-wide enrolment, and apply tags. Use it when an agent or workflow needs to programmatically administer Detective behavior graphs across many AWS accounts.

24 endpoints

Amazon GuardDuty

Jentic publishes the only available OpenAPI specification for Amazon GuardDuty, keeping it validated and agent-ready. Amazon GuardDuty is a continuous threat detection service that analyses VPC flow logs, CloudTrail events, DNS logs, EKS audit logs, and EBS volume data to surface suspicious activity in AWS accounts. The API covers full lifecycle management of detectors, findings, threat intelligence sets, IP allow lists, member accounts, malware protection plans, and publishing destinations across 67 operations.

67 endpoints

AWS Audit Manager

AWS Audit Manager automates the collection of evidence for compliance audits across AWS workloads. It uses prebuilt and custom frameworks — such as PCI DSS, HIPAA, and SOC 2 — to map controls to assessable AWS services and continuously gather evidence into structured assessments and reports.

61 endpoints

AWS Certificate Manager

Jentic publishes the only available OpenAPI specification for AWS Certificate Manager, keeping it validated and agent-ready. AWS Certificate Manager (ACM) provisions, manages, and deploys SSL/TLS certificates for AWS resources such as Elastic Load Balancers, CloudFront distributions, and API Gateway endpoints. The API exposes 15 operations covering certificate request, import, listing, deletion, tagging, and account-level configuration, so platform teams can automate certificate lifecycle and avoid expiry-related outages.

15 endpoints

AWS CloudHSM V2

Jentic publishes the only available OpenAPI specification for AWS CloudHSM V2, keeping it validated and agent-ready. AWS CloudHSM V2 provides single-tenant, FIPS 140-2 Level 3 hardware security modules in your VPC for generating and using cryptographic keys. Agents can create and manage HSM clusters, provision individual HSMs, take and restore backups, and copy backups across regions. The service is intended for workloads with strict key custody, compliance, or BYOK requirements where AWS KMS multi-tenant HSMs are not sufficient.

15 endpoints

AWS CloudTrail

Jentic publishes the only available OpenAPI specification for AWS CloudTrail, keeping it validated and agent-ready. AWS CloudTrail records management and data events across an AWS account, delivers them to S3 or an event data store, and lets you query the log with CloudTrail Lake. The API covers trails, channels, event data stores, query execution, and resource policies, so an agent can configure logging, run SQL-like queries, and pull recent events without touching the console.

44 endpoints

AWS Network Firewall

Jentic publishes the only available OpenAPI specification for AWS Network Firewall, keeping it validated and agent-ready. AWS Network Firewall is a managed stateful firewall and intrusion prevention service for VPC traffic — it deploys firewall endpoints into VPC subnets, enforces stateless and stateful rule groups (5-tuple, domain-list, and Suricata-compatible signature rules), and ties everything together with FirewallPolicies. The 36 endpoints cover Firewall and FirewallPolicy CRUD, RuleGroup management, subnet association, logging configuration, and TLS inspection configuration.

36 endpoints

AWS SecurityHub

Jentic publishes the only available OpenAPI specification for AWS SecurityHub, keeping it validated and agent-ready. AWS Security Hub aggregates, normalises, and prioritises security findings from AWS services such as GuardDuty, Inspector, and Macie, plus integrated third-party products. Agents can ingest findings through BatchImportFindings, update finding status with BatchUpdateFindings, enable security standards like CIS and PCI DSS, run automated insights, and manage member accounts in a multi-account organisation. The API exposes 61 operations covering findings, controls, standards, insights, action targets, and finding aggregators.

61 endpoints

AWS WAF Classic

Jentic publishes the only available OpenAPI specification for AWS WAF Classic, keeping it validated and agent-ready. AWS WAF Classic protects CloudFront distributions and Application Load Balancers from common web exploits by matching incoming requests against rules built from byte-match, IP-set, geo-match, regex, size-constraint, SQL-injection, and XSS conditions. The 77 operations cover full CRUD on every match-condition type, on rules and rate-based rules, on rule groups, and on Web ACLs, along with the change-token workflow that AWS WAF Classic uses for consistency. Note: AWS recommends WAFv2 for new deployments; this API covers the original (Classic) version.

77 endpoints

Connect Your Agent

Step 1: Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh

Step 2: Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.