--- updatedAt: 2026-05-28T08:16:45.000Z agentTools: projectIndex: https://docs.scalr.io/llms.txt --- # List service account assume policies List service account assume policies. # OpenAPI definition ```json { "components": { "schemas": { "AssumeServiceAccountPolicy": { "description": "A trust configuration that maps authenticated workload identities to specific service account.", "properties": { "attributes": { "properties": { "claim-conditions": { "description": "A claim mapping, defining the conditions under which the workload identity can impersonate the service account..", "items": { "properties": { "claim": { "description": "The name of the claim in the OIDC ID token that needs to be evaluated.", "type": "string" }, "operator": { "default": "eq", "description": "The operation to perform to evaluate the claim's value against the specified condition. Supported values: \"eq\": checks if the claim value is equal to the specified value; \"contains\": checks if the claim value contains the specified value as a substring; \"startswith\": checks if the claim value starts with the specified value; \"endswith\": checks if the claim value ends with the specified value; \"like\": checks whether the claim value matches a specified pattern using shell-style wildcards (* any string, ? any char, [seq] any in seq, [!seq] any not in seq).", "enum": [ "eq", "contains", "startswith", "endswith", "like" ], "type": "string" }, "value": { "description": "The expected value or pattern to match for the specified claim.", "type": "string" } }, "required": [ "claim", "value" ], "type": "object" }, "type": "array" }, "created-at": { "description": "The UTC datetime at which the assume service account policy was created.", "format": "date-time", "readOnly": true, "type": "string" }, "created-by-email": { "description": "Email of the user who created assume service account policy.", "nullable": true, "readOnly": true, "type": "string" }, "maximum-session-duration": { "default": 3600, "description": "The maximum validity period, in seconds, for the token generated during the impersonation operation. Default: 3600 seconds or 1 hour. Range: 3600-43200 seconds (1-12 hours).", "nullable": true, "type": "integer" }, "name": { "description": "The assume service account policy name.", "maxLength": 255, "type": "string" } }, "required": [ "name", "claim-conditions" ], "type": "object" }, "id": { "readOnly": true, "type": "string" }, "links": { "additionalProperties": { "type": "string" }, "type": "object" }, "relationships": { "properties": { "provider": { "properties": { "data": { "nullable": true, "properties": { "id": { "type": "string" }, "type": { "enum": [ "workload-identity-providers", "" ], "type": "string" } }, "required": [ "type", "id" ], "type": "object" } }, "required": [ "data" ], "type": "object" }, "service-account": { "properties": { "data": { "nullable": true, "properties": { "id": { "type": "string" }, "type": { "enum": [ "service-accounts", "" ], "type": "string" } }, "required": [ "type", "id" ], "type": "object" } }, "readOnly": true, "required": [ "data" ], "type": "object" } }, "type": "object" }, "type": { "enum": [ "assume-service-account-policies" ], "type": "string" } }, "required": [ "type", "attributes" ], "type": "object" }, "AssumeServiceAccountPolicyListingDocument": { "description": "JSON:API Document Listing\n\nsee: https://jsonapi.org/format/#document-structure", "properties": { "data": { "items": { "$ref": "#/components/schemas/AssumeServiceAccountPolicy" }, "type": "array" }, "included": { "items": { "type": "object" }, "readOnly": true, "type": "array" }, "links": { "additionalProperties": { "type": "string" }, "readOnly": true, "type": "object" }, "meta": { "readOnly": true, "type": "object" } }, "type": "object" } }, "securitySchemes": { "API-Key": { "scheme": "bearer", "type": "http" } } }, "info": { "description": "Scalr IACP API", "license": { "name": "Apache 2.0", "url": "https://www.apache.org/licenses/LICENSE-2.0" }, "title": "Scalr IACP API", "version": "unversioned" }, "openapi": "3.0.0", "paths": { "/assume-service-account-policies": { "get": { "description": "List service account assume policies.\n", "operationId": "list_assume_service_account_policies", "parameters": [ { "description": "The comma-separated list of relationship paths.", "explode": false, "in": "query", "name": "include", "required": false, "schema": { "items": { "enum": [ "provider", "service-account" ], "type": "string" }, "type": "array" } }, { "description": "The service account filter.", "in": "query", "name": "filter[service-account]", "required": false, "schema": { "type": "string" } }, { "description": "The workload identity provider filter.", "in": "query", "name": "filter[workload-identity-provider]", "required": false, "schema": { "type": "string" } }, { "description": "The assume service account policy name filter.", "in": "query", "name": "filter[name]", "required": false, "schema": { "type": "string" } }, { "description": "The ID(s) of assume service account policy(ies).", "in": "query", "name": "filter[assume-service-account-policy]", "required": false, "schema": { "type": "string" } }, { "description": "Page number", "in": "query", "name": "page[number]", "required": false, "schema": { "type": "string" } }, { "description": "Page size", "in": "query", "name": "page[size]", "required": false, "schema": { "type": "string" } }, { "description": "The comma-separated list of attributes.", "explode": false, "in": "query", "name": "sort", "required": false, "schema": { "items": { "enum": [ "email", "name" ], "type": "string" }, "type": "array" } }, { "description": "Query string", "in": "query", "name": "query", "required": false, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/vnd.api+json": { "schema": { "$ref": "#/components/schemas/AssumeServiceAccountPolicyListingDocument" } } }, "description": "Success." }, "403": { "description": "User unauthorized to perform this action." }, "4XX": { "description": "Client error." }, "5XX": { "description": "Server error." } }, "summary": "List service account assume policies", "tags": [ "service-accounts" ], "x-resource": "ServiceAccount", "x-service": "tf-api" } } }, "security": [ { "API-Key": [] } ], "servers": [ { "url": "https://{Domain}/api/iacp/v3", "variables": { "Domain": { "default": "example.scalr.io", "description": "Domain where Scalr is hosted" } } } ] } ``` # Sibling pages * [List Service Accounts](https://docs.scalr.io/scalr/reference/get_service_accounts.md) * [Create a Service Account](https://docs.scalr.io/scalr/reference/create_service_account.md) * [Delete a Service Account](https://docs.scalr.io/scalr/reference/delete_service_account.md) * [Get a Service Account](https://docs.scalr.io/scalr/reference/get_service_account.md) * [Update a Service Account](https://docs.scalr.io/scalr/reference/update_service_account.md) * [Create an assume service account policy](https://docs.scalr.io/scalr/reference/create_assume_service_account_policy.md) * [Delete an assume service account policy](https://docs.scalr.io/scalr/reference/delete_assume_service_account_policy.md) * [Get an assume service account policy](https://docs.scalr.io/scalr/reference/get_assume_service_account_policy.md) * [Update an assume service account policy](https://docs.scalr.io/scalr/reference/update_assume_service_account_policy.md)