List cloud-credentials

GET

/cloud-credentials

• Current canonical versioned path (F3.API.01)

Per-organisation BYOC (Bring Your Own Cloud) credentials. Sensitive fields are stored encrypted. If no credential is associated with a provisioning request, the platform default (from cloud-connector .env) is used as fallback.

Authorizations

• bearerAuth
• apiTokenAuth

Parameters

Query Parameters

pagination[page]

integer

pagination[pageSize]

integer

filters

Strapi REST filter syntax

object

sort

string

populate

string

Responses

200

OK

object

data

Array

object

name

required

string

>= 1 characters <= 120 characters

provider

required

string

Allowed values: hetzner ovhcloud aws gcp azure scaleway upcloud digitalocean

is_active

required

boolean

credential_data

Arbitrary JSON value (object, array, string, number, boolean, or null)

encrypted_payload

AES-256-GCM šifrovaný JSON s credentials (F2.C.03). NIKDY se nevrací v API. Dešifruje cloud-connector sdíleným BYOC_ENCRYPTION_KEY.

string

validation_status

required

Stav ověření credentials reálným API voláním (F2.C.03).

string

Allowed values: pending valid invalid

last_validated_at

string format: date-time

scopes

Detekovaná oprávnění z validace (např. [‘ec2:read’,‘rds:write’]).

last_used_at

string format: date-time

organisation

One of:

string

DocumentId reference to api::organisation.organisation

string

object

object

key

additional properties

any

created_by_user

One of:

string

DocumentId reference to plugin::users-permissions.user

string

object

object

key

additional properties

any

home_region

required

Logical data-residency region of the tenant (CELL invariant, F2.CELL.01)

string

Allowed values: eu us apac

cell_id

Deployment cell within home_region for blast-radius isolation (CELL invariant, F2.CELL.01)

string

environment

string

Allowed values: dev staging prod sandbox

is_default

boolean

account_id

string

account_name

string

cost_center

string

documentId

string

id

integer

createdAt

string format: date-time

updatedAt

string format: date-time

publishedAt

string format: date-time

nullable

meta

object

pagination

object

page

integer

pageSize

integer

pageCount

integer

total

integer

401

Missing or invalid authentication

403

Not authorized (tenant scope or capability)