1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. location
  5. getApiKey

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.59.0
published on Monday, Mar 30, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

aws-native.location.getApiKey

aws-native logo

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.59.0
published on Monday, Mar 30, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

    Definition of AWS::Location::APIKey Resource Type

    Using getApiKey

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getApiKey(args: GetApiKeyArgs, opts?: InvokeOptions): Promise<GetApiKeyResult>
function getApiKeyOutput(args: GetApiKeyOutputArgs, opts?: InvokeOptions): Output<GetApiKeyResult>
    def get_api_key(key_name: Optional[str] = None,
                opts: Optional[InvokeOptions] = None) -> GetApiKeyResult
def get_api_key_output(key_name: Optional[pulumi.Input[str]] = None,
                opts: Optional[InvokeOptions] = None) -> Output[GetApiKeyResult]
    func LookupApiKey(ctx *Context, args *LookupApiKeyArgs, opts ...InvokeOption) (*LookupApiKeyResult, error)
func LookupApiKeyOutput(ctx *Context, args *LookupApiKeyOutputArgs, opts ...InvokeOption) LookupApiKeyResultOutput

    > Note: This function is named LookupApiKey in the Go SDK.

    public static class GetApiKey 
{
    public static Task<GetApiKeyResult> InvokeAsync(GetApiKeyArgs args, InvokeOptions? opts = null)
    public static Output<GetApiKeyResult> Invoke(GetApiKeyInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetApiKeyResult> getApiKey(GetApiKeyArgs args, InvokeOptions options)
public static Output<GetApiKeyResult> getApiKey(GetApiKeyArgs args, InvokeOptions options)

    fn::invoke:
  function: aws-native:location:getApiKey
  arguments:
    # arguments dictionary

    The following arguments are supported:

    KeyName string

    A custom name for the API key resource.

    Requirements:

    • Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).
    • Must be a unique API key name.
    • No spaces allowed. For example, ExampleAPIKey .
    KeyName string

    A custom name for the API key resource.

    Requirements:

    • Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).
    • Must be a unique API key name.
    • No spaces allowed. For example, ExampleAPIKey .
    keyName String

    A custom name for the API key resource.

    Requirements:

    • Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).
    • Must be a unique API key name.
    • No spaces allowed. For example, ExampleAPIKey .
    keyName string

    A custom name for the API key resource.

    Requirements:

    • Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).
    • Must be a unique API key name.
    • No spaces allowed. For example, ExampleAPIKey .
    key_name str

    A custom name for the API key resource.

    Requirements:

    • Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).
    • Must be a unique API key name.
    • No spaces allowed. For example, ExampleAPIKey .
    keyName String

    A custom name for the API key resource.

    Requirements:

    • Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).
    • Must be a unique API key name.
    • No spaces allowed. For example, ExampleAPIKey .

    getApiKey Result

    The following output properties are available:

    Arn string
    The Amazon Resource Name (ARN) for the resource. Used when you need to specify a resource across all AWS .
    CreateTime string
    The timestamp for when the API key resource was created in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ.
    Description string
    Updates the description for the API key resource.
    ExpireTime string
    The optional timestamp for when the API key resource will expire in ISO 8601 format .
    KeyArn string
    The Amazon Resource Name (ARN) for the API key resource. Used when you need to specify a resource across all AWS .
    Restrictions Pulumi.AwsNative.Location.Outputs.ApiKeyRestrictions
    The API key restrictions for the API key resource.
    Tags List<Pulumi.AwsNative.Outputs.Tag>
    An array of key-value pairs to apply to this resource.
    UpdateTime string
    The timestamp for when the API key resource was last updated in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ .
    Arn string
    The Amazon Resource Name (ARN) for the resource. Used when you need to specify a resource across all AWS .
    CreateTime string
    The timestamp for when the API key resource was created in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ.
    Description string
    Updates the description for the API key resource.
    ExpireTime string
    The optional timestamp for when the API key resource will expire in ISO 8601 format .
    KeyArn string
    The Amazon Resource Name (ARN) for the API key resource. Used when you need to specify a resource across all AWS .
    Restrictions ApiKeyRestrictions
    The API key restrictions for the API key resource.
    Tags Tag
    An array of key-value pairs to apply to this resource.
    UpdateTime string
    The timestamp for when the API key resource was last updated in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ .
    arn String
    The Amazon Resource Name (ARN) for the resource. Used when you need to specify a resource across all AWS .
    createTime String
    The timestamp for when the API key resource was created in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ.
    description String
    Updates the description for the API key resource.
    expireTime String
    The optional timestamp for when the API key resource will expire in ISO 8601 format .
    keyArn String
    The Amazon Resource Name (ARN) for the API key resource. Used when you need to specify a resource across all AWS .
    restrictions ApiKeyRestrictions
    The API key restrictions for the API key resource.
    tags List<Tag>
    An array of key-value pairs to apply to this resource.
    updateTime String
    The timestamp for when the API key resource was last updated in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ .
    arn string
    The Amazon Resource Name (ARN) for the resource. Used when you need to specify a resource across all AWS .
    createTime string
    The timestamp for when the API key resource was created in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ.
    description string
    Updates the description for the API key resource.
    expireTime string
    The optional timestamp for when the API key resource will expire in ISO 8601 format .
    keyArn string
    The Amazon Resource Name (ARN) for the API key resource. Used when you need to specify a resource across all AWS .
    restrictions ApiKeyRestrictions
    The API key restrictions for the API key resource.
    tags Tag[]
    An array of key-value pairs to apply to this resource.
    updateTime string
    The timestamp for when the API key resource was last updated in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ .
    arn str
    The Amazon Resource Name (ARN) for the resource. Used when you need to specify a resource across all AWS .
    create_time str
    The timestamp for when the API key resource was created in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ.
    description str
    Updates the description for the API key resource.
    expire_time str
    The optional timestamp for when the API key resource will expire in ISO 8601 format .
    key_arn str
    The Amazon Resource Name (ARN) for the API key resource. Used when you need to specify a resource across all AWS .
    restrictions ApiKeyRestrictions
    The API key restrictions for the API key resource.
    tags Sequence[root_Tag]
    An array of key-value pairs to apply to this resource.
    update_time str
    The timestamp for when the API key resource was last updated in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ .
    arn String
    The Amazon Resource Name (ARN) for the resource. Used when you need to specify a resource across all AWS .
    createTime String
    The timestamp for when the API key resource was created in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ.
    description String
    Updates the description for the API key resource.
    expireTime String
    The optional timestamp for when the API key resource will expire in ISO 8601 format .
    keyArn String
    The Amazon Resource Name (ARN) for the API key resource. Used when you need to specify a resource across all AWS .
    restrictions Property Map
    The API key restrictions for the API key resource.
    tags List<Property Map>
    An array of key-value pairs to apply to this resource.
    updateTime String
    The timestamp for when the API key resource was last updated in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ .

    Supporting Types

    ApiKeyAndroidApp

    ApiKeyAppleApp

    BundleId string
    BundleId string
    bundleId String
    bundleId string
    bundleId String

    ApiKeyRestrictions

    AllowActions List<string>

    A list of allowed actions that an API key resource grants permissions to perform. You must have at least one action for each type of resource. For example, if you have a place resource, you must include at least one place action.

    The following are valid values for the actions.

    • Map actions

    • geo:GetMap* - Allows all actions needed for map rendering.

    • Enhanced Maps actions

    • geo-maps:GetTile - Allows getting map tiles for rendering.

    • geo-maps:GetStaticMap - Allows getting static map images.

    • Place actions

    • geo:SearchPlaceIndexForText - Allows finding geo coordinates of a known place.

    • geo:SearchPlaceIndexForPosition - Allows getting nearest address to geo coordinates.

    • geo:SearchPlaceIndexForSuggestions - Allows suggestions based on an incomplete or misspelled query.

    • geo:GetPlace - Allows getting details of a place.

    • Enhanced Places actions

    • geo-places:Autcomplete - Allows auto-completion of search text.

    • geo-places:Geocode - Allows finding geo coordinates of a known place.

    • geo-places:GetPlace - Allows getting details of a place.

    • geo-places:ReverseGeocode - Allows getting nearest address to geo coordinates.

    • geo-places:SearchNearby - Allows category based places search around geo coordinates.

    • geo-places:SearchText - Allows place or address search based on free-form text.

    • geo-places:Suggest - Allows suggestions based on an incomplete or misspelled query.

    • Route actions

    • geo:CalculateRoute - Allows point to point routing.

    • geo:CalculateRouteMatrix - Allows matrix routing.

    • Enhanced Routes actions

    • geo-routes:CalculateIsolines - Allows isoline calculation.

    • geo-routes:CalculateRoutes - Allows point to point routing.

    • geo-routes:CalculateRouteMatrix - Allows matrix routing.

    • geo-routes:OptimizeWaypoints - Allows computing the best sequence of waypoints.

    • geo-routes:SnapToRoads - Allows snapping GPS points to a likely route.

    You must use these strings exactly. For example, to provide access to map rendering, the only valid action is geo:GetMap* as an input to the list. ["geo:GetMap*"] is valid but ["geo:GetTile"] is not. Similarly, you cannot use ["geo:SearchPlaceIndexFor*"] - you must list each of the Place actions separately.

    AllowResources List<string>

    A list of allowed resource ARNs that a API key bearer can perform actions on.

    • The ARN must be the correct ARN for a map, place, or route ARN. You may include wildcards in the resource-id to match multiple resources of the same type.
    • The resources must be in the same partition , region , and account-id as the key that is being created.
    • Other than wildcards, you must include the full ARN, including the arn , partition , service , region , account-id and resource-id delimited by colons (:).
    • No spaces allowed, even with wildcards. For example, arn:aws:geo:region: *account-id* :map/ExampleMap* .

    For more information about ARN format, see Amazon Resource Names (ARNs) .

    AllowAndroidApps List<Pulumi.AwsNative.Location.Inputs.ApiKeyAndroidApp>
    AllowAppleApps List<Pulumi.AwsNative.Location.Inputs.ApiKeyAppleApp>
    AllowReferers List<string>

    An optional list of allowed HTTP referers for which requests must originate from. Requests using this API key from other domains will not be allowed.

    Requirements:

    • Contain only alphanumeric characters (A–Z, a–z, 0–9) or any symbols in this list $\-._+!*(),;/?:@=&`
    • May contain a percent (%) if followed by 2 hexadecimal digits (A-F, a-f, 0-9); this is used for URL encoding purposes.
    • May contain wildcard characters question mark (?) and asterisk (*).

    Question mark (?) will replace any single character (including hexadecimal digits).

    Asterisk (*) will replace any multiple characters (including multiple hexadecimal digits).

    • No spaces allowed. For example, https://example.com .
    AllowActions []string

    A list of allowed actions that an API key resource grants permissions to perform. You must have at least one action for each type of resource. For example, if you have a place resource, you must include at least one place action.

    The following are valid values for the actions.

    • Map actions

    • geo:GetMap* - Allows all actions needed for map rendering.

    • Enhanced Maps actions

    • geo-maps:GetTile - Allows getting map tiles for rendering.

    • geo-maps:GetStaticMap - Allows getting static map images.

    • Place actions

    • geo:SearchPlaceIndexForText - Allows finding geo coordinates of a known place.

    • geo:SearchPlaceIndexForPosition - Allows getting nearest address to geo coordinates.

    • geo:SearchPlaceIndexForSuggestions - Allows suggestions based on an incomplete or misspelled query.

    • geo:GetPlace - Allows getting details of a place.

    • Enhanced Places actions

    • geo-places:Autcomplete - Allows auto-completion of search text.

    • geo-places:Geocode - Allows finding geo coordinates of a known place.

    • geo-places:GetPlace - Allows getting details of a place.

    • geo-places:ReverseGeocode - Allows getting nearest address to geo coordinates.

    • geo-places:SearchNearby - Allows category based places search around geo coordinates.

    • geo-places:SearchText - Allows place or address search based on free-form text.

    • geo-places:Suggest - Allows suggestions based on an incomplete or misspelled query.

    • Route actions

    • geo:CalculateRoute - Allows point to point routing.

    • geo:CalculateRouteMatrix - Allows matrix routing.

    • Enhanced Routes actions

    • geo-routes:CalculateIsolines - Allows isoline calculation.

    • geo-routes:CalculateRoutes - Allows point to point routing.

    • geo-routes:CalculateRouteMatrix - Allows matrix routing.

    • geo-routes:OptimizeWaypoints - Allows computing the best sequence of waypoints.

    • geo-routes:SnapToRoads - Allows snapping GPS points to a likely route.

    You must use these strings exactly. For example, to provide access to map rendering, the only valid action is geo:GetMap* as an input to the list. ["geo:GetMap*"] is valid but ["geo:GetTile"] is not. Similarly, you cannot use ["geo:SearchPlaceIndexFor*"] - you must list each of the Place actions separately.

    AllowResources []string

    A list of allowed resource ARNs that a API key bearer can perform actions on.

    • The ARN must be the correct ARN for a map, place, or route ARN. You may include wildcards in the resource-id to match multiple resources of the same type.
    • The resources must be in the same partition , region , and account-id as the key that is being created.
    • Other than wildcards, you must include the full ARN, including the arn , partition , service , region , account-id and resource-id delimited by colons (:).
    • No spaces allowed, even with wildcards. For example, arn:aws:geo:region: *account-id* :map/ExampleMap* .

    For more information about ARN format, see Amazon Resource Names (ARNs) .

    AllowAndroidApps []ApiKeyAndroidApp
    AllowAppleApps []ApiKeyAppleApp
    AllowReferers []string

    An optional list of allowed HTTP referers for which requests must originate from. Requests using this API key from other domains will not be allowed.

    Requirements:

    • Contain only alphanumeric characters (A–Z, a–z, 0–9) or any symbols in this list $\-._+!*(),;/?:@=&`
    • May contain a percent (%) if followed by 2 hexadecimal digits (A-F, a-f, 0-9); this is used for URL encoding purposes.
    • May contain wildcard characters question mark (?) and asterisk (*).

    Question mark (?) will replace any single character (including hexadecimal digits).

    Asterisk (*) will replace any multiple characters (including multiple hexadecimal digits).

    • No spaces allowed. For example, https://example.com .
    allowActions List<String>

    A list of allowed actions that an API key resource grants permissions to perform. You must have at least one action for each type of resource. For example, if you have a place resource, you must include at least one place action.

    The following are valid values for the actions.

    • Map actions

    • geo:GetMap* - Allows all actions needed for map rendering.

    • Enhanced Maps actions

    • geo-maps:GetTile - Allows getting map tiles for rendering.

    • geo-maps:GetStaticMap - Allows getting static map images.

    • Place actions

    • geo:SearchPlaceIndexForText - Allows finding geo coordinates of a known place.

    • geo:SearchPlaceIndexForPosition - Allows getting nearest address to geo coordinates.

    • geo:SearchPlaceIndexForSuggestions - Allows suggestions based on an incomplete or misspelled query.

    • geo:GetPlace - Allows getting details of a place.

    • Enhanced Places actions

    • geo-places:Autcomplete - Allows auto-completion of search text.

    • geo-places:Geocode - Allows finding geo coordinates of a known place.

    • geo-places:GetPlace - Allows getting details of a place.

    • geo-places:ReverseGeocode - Allows getting nearest address to geo coordinates.

    • geo-places:SearchNearby - Allows category based places search around geo coordinates.

    • geo-places:SearchText - Allows place or address search based on free-form text.

    • geo-places:Suggest - Allows suggestions based on an incomplete or misspelled query.

    • Route actions

    • geo:CalculateRoute - Allows point to point routing.

    • geo:CalculateRouteMatrix - Allows matrix routing.

    • Enhanced Routes actions

    • geo-routes:CalculateIsolines - Allows isoline calculation.

    • geo-routes:CalculateRoutes - Allows point to point routing.

    • geo-routes:CalculateRouteMatrix - Allows matrix routing.

    • geo-routes:OptimizeWaypoints - Allows computing the best sequence of waypoints.

    • geo-routes:SnapToRoads - Allows snapping GPS points to a likely route.

    You must use these strings exactly. For example, to provide access to map rendering, the only valid action is geo:GetMap* as an input to the list. ["geo:GetMap*"] is valid but ["geo:GetTile"] is not. Similarly, you cannot use ["geo:SearchPlaceIndexFor*"] - you must list each of the Place actions separately.

    allowResources List<String>

    A list of allowed resource ARNs that a API key bearer can perform actions on.

    • The ARN must be the correct ARN for a map, place, or route ARN. You may include wildcards in the resource-id to match multiple resources of the same type.
    • The resources must be in the same partition , region , and account-id as the key that is being created.
    • Other than wildcards, you must include the full ARN, including the arn , partition , service , region , account-id and resource-id delimited by colons (:).
    • No spaces allowed, even with wildcards. For example, arn:aws:geo:region: *account-id* :map/ExampleMap* .

    For more information about ARN format, see Amazon Resource Names (ARNs) .

    allowAndroidApps List<ApiKeyAndroidApp>
    allowAppleApps List<ApiKeyAppleApp>
    allowReferers List<String>

    An optional list of allowed HTTP referers for which requests must originate from. Requests using this API key from other domains will not be allowed.

    Requirements:

    • Contain only alphanumeric characters (A–Z, a–z, 0–9) or any symbols in this list $\-._+!*(),;/?:@=&`
    • May contain a percent (%) if followed by 2 hexadecimal digits (A-F, a-f, 0-9); this is used for URL encoding purposes.
    • May contain wildcard characters question mark (?) and asterisk (*).

    Question mark (?) will replace any single character (including hexadecimal digits).

    Asterisk (*) will replace any multiple characters (including multiple hexadecimal digits).

    • No spaces allowed. For example, https://example.com .
    allowActions string[]

    A list of allowed actions that an API key resource grants permissions to perform. You must have at least one action for each type of resource. For example, if you have a place resource, you must include at least one place action.

    The following are valid values for the actions.

    • Map actions

    • geo:GetMap* - Allows all actions needed for map rendering.

    • Enhanced Maps actions

    • geo-maps:GetTile - Allows getting map tiles for rendering.

    • geo-maps:GetStaticMap - Allows getting static map images.

    • Place actions

    • geo:SearchPlaceIndexForText - Allows finding geo coordinates of a known place.

    • geo:SearchPlaceIndexForPosition - Allows getting nearest address to geo coordinates.

    • geo:SearchPlaceIndexForSuggestions - Allows suggestions based on an incomplete or misspelled query.

    • geo:GetPlace - Allows getting details of a place.

    • Enhanced Places actions

    • geo-places:Autcomplete - Allows auto-completion of search text.

    • geo-places:Geocode - Allows finding geo coordinates of a known place.

    • geo-places:GetPlace - Allows getting details of a place.

    • geo-places:ReverseGeocode - Allows getting nearest address to geo coordinates.

    • geo-places:SearchNearby - Allows category based places search around geo coordinates.

    • geo-places:SearchText - Allows place or address search based on free-form text.

    • geo-places:Suggest - Allows suggestions based on an incomplete or misspelled query.

    • Route actions

    • geo:CalculateRoute - Allows point to point routing.

    • geo:CalculateRouteMatrix - Allows matrix routing.

    • Enhanced Routes actions

    • geo-routes:CalculateIsolines - Allows isoline calculation.

    • geo-routes:CalculateRoutes - Allows point to point routing.

    • geo-routes:CalculateRouteMatrix - Allows matrix routing.

    • geo-routes:OptimizeWaypoints - Allows computing the best sequence of waypoints.

    • geo-routes:SnapToRoads - Allows snapping GPS points to a likely route.

    You must use these strings exactly. For example, to provide access to map rendering, the only valid action is geo:GetMap* as an input to the list. ["geo:GetMap*"] is valid but ["geo:GetTile"] is not. Similarly, you cannot use ["geo:SearchPlaceIndexFor*"] - you must list each of the Place actions separately.

    allowResources string[]

    A list of allowed resource ARNs that a API key bearer can perform actions on.

    • The ARN must be the correct ARN for a map, place, or route ARN. You may include wildcards in the resource-id to match multiple resources of the same type.
    • The resources must be in the same partition , region , and account-id as the key that is being created.
    • Other than wildcards, you must include the full ARN, including the arn , partition , service , region , account-id and resource-id delimited by colons (:).
    • No spaces allowed, even with wildcards. For example, arn:aws:geo:region: *account-id* :map/ExampleMap* .

    For more information about ARN format, see Amazon Resource Names (ARNs) .

    allowAndroidApps ApiKeyAndroidApp[]
    allowAppleApps ApiKeyAppleApp[]
    allowReferers string[]

    An optional list of allowed HTTP referers for which requests must originate from. Requests using this API key from other domains will not be allowed.

    Requirements:

    • Contain only alphanumeric characters (A–Z, a–z, 0–9) or any symbols in this list $\-._+!*(),;/?:@=&`
    • May contain a percent (%) if followed by 2 hexadecimal digits (A-F, a-f, 0-9); this is used for URL encoding purposes.
    • May contain wildcard characters question mark (?) and asterisk (*).

    Question mark (?) will replace any single character (including hexadecimal digits).

    Asterisk (*) will replace any multiple characters (including multiple hexadecimal digits).

    • No spaces allowed. For example, https://example.com .
    allow_actions Sequence[str]

    A list of allowed actions that an API key resource grants permissions to perform. You must have at least one action for each type of resource. For example, if you have a place resource, you must include at least one place action.

    The following are valid values for the actions.

    • Map actions

    • geo:GetMap* - Allows all actions needed for map rendering.

    • Enhanced Maps actions

    • geo-maps:GetTile - Allows getting map tiles for rendering.

    • geo-maps:GetStaticMap - Allows getting static map images.

    • Place actions

    • geo:SearchPlaceIndexForText - Allows finding geo coordinates of a known place.

    • geo:SearchPlaceIndexForPosition - Allows getting nearest address to geo coordinates.

    • geo:SearchPlaceIndexForSuggestions - Allows suggestions based on an incomplete or misspelled query.

    • geo:GetPlace - Allows getting details of a place.

    • Enhanced Places actions

    • geo-places:Autcomplete - Allows auto-completion of search text.

    • geo-places:Geocode - Allows finding geo coordinates of a known place.

    • geo-places:GetPlace - Allows getting details of a place.

    • geo-places:ReverseGeocode - Allows getting nearest address to geo coordinates.

    • geo-places:SearchNearby - Allows category based places search around geo coordinates.

    • geo-places:SearchText - Allows place or address search based on free-form text.

    • geo-places:Suggest - Allows suggestions based on an incomplete or misspelled query.

    • Route actions

    • geo:CalculateRoute - Allows point to point routing.

    • geo:CalculateRouteMatrix - Allows matrix routing.

    • Enhanced Routes actions

    • geo-routes:CalculateIsolines - Allows isoline calculation.

    • geo-routes:CalculateRoutes - Allows point to point routing.

    • geo-routes:CalculateRouteMatrix - Allows matrix routing.

    • geo-routes:OptimizeWaypoints - Allows computing the best sequence of waypoints.

    • geo-routes:SnapToRoads - Allows snapping GPS points to a likely route.

    You must use these strings exactly. For example, to provide access to map rendering, the only valid action is geo:GetMap* as an input to the list. ["geo:GetMap*"] is valid but ["geo:GetTile"] is not. Similarly, you cannot use ["geo:SearchPlaceIndexFor*"] - you must list each of the Place actions separately.

    allow_resources Sequence[str]

    A list of allowed resource ARNs that a API key bearer can perform actions on.

    • The ARN must be the correct ARN for a map, place, or route ARN. You may include wildcards in the resource-id to match multiple resources of the same type.
    • The resources must be in the same partition , region , and account-id as the key that is being created.
    • Other than wildcards, you must include the full ARN, including the arn , partition , service , region , account-id and resource-id delimited by colons (:).
    • No spaces allowed, even with wildcards. For example, arn:aws:geo:region: *account-id* :map/ExampleMap* .

    For more information about ARN format, see Amazon Resource Names (ARNs) .

    allow_android_apps Sequence[ApiKeyAndroidApp]
    allow_apple_apps Sequence[ApiKeyAppleApp]
    allow_referers Sequence[str]

    An optional list of allowed HTTP referers for which requests must originate from. Requests using this API key from other domains will not be allowed.

    Requirements:

    • Contain only alphanumeric characters (A–Z, a–z, 0–9) or any symbols in this list $\-._+!*(),;/?:@=&`
    • May contain a percent (%) if followed by 2 hexadecimal digits (A-F, a-f, 0-9); this is used for URL encoding purposes.
    • May contain wildcard characters question mark (?) and asterisk (*).

    Question mark (?) will replace any single character (including hexadecimal digits).

    Asterisk (*) will replace any multiple characters (including multiple hexadecimal digits).

    • No spaces allowed. For example, https://example.com .
    allowActions List<String>

    A list of allowed actions that an API key resource grants permissions to perform. You must have at least one action for each type of resource. For example, if you have a place resource, you must include at least one place action.

    The following are valid values for the actions.

    • Map actions

    • geo:GetMap* - Allows all actions needed for map rendering.

    • Enhanced Maps actions

    • geo-maps:GetTile - Allows getting map tiles for rendering.

    • geo-maps:GetStaticMap - Allows getting static map images.

    • Place actions

    • geo:SearchPlaceIndexForText - Allows finding geo coordinates of a known place.

    • geo:SearchPlaceIndexForPosition - Allows getting nearest address to geo coordinates.

    • geo:SearchPlaceIndexForSuggestions - Allows suggestions based on an incomplete or misspelled query.

    • geo:GetPlace - Allows getting details of a place.

    • Enhanced Places actions

    • geo-places:Autcomplete - Allows auto-completion of search text.

    • geo-places:Geocode - Allows finding geo coordinates of a known place.

    • geo-places:GetPlace - Allows getting details of a place.

    • geo-places:ReverseGeocode - Allows getting nearest address to geo coordinates.

    • geo-places:SearchNearby - Allows category based places search around geo coordinates.

    • geo-places:SearchText - Allows place or address search based on free-form text.

    • geo-places:Suggest - Allows suggestions based on an incomplete or misspelled query.

    • Route actions

    • geo:CalculateRoute - Allows point to point routing.

    • geo:CalculateRouteMatrix - Allows matrix routing.

    • Enhanced Routes actions

    • geo-routes:CalculateIsolines - Allows isoline calculation.

    • geo-routes:CalculateRoutes - Allows point to point routing.

    • geo-routes:CalculateRouteMatrix - Allows matrix routing.

    • geo-routes:OptimizeWaypoints - Allows computing the best sequence of waypoints.

    • geo-routes:SnapToRoads - Allows snapping GPS points to a likely route.

    You must use these strings exactly. For example, to provide access to map rendering, the only valid action is geo:GetMap* as an input to the list. ["geo:GetMap*"] is valid but ["geo:GetTile"] is not. Similarly, you cannot use ["geo:SearchPlaceIndexFor*"] - you must list each of the Place actions separately.

    allowResources List<String>

    A list of allowed resource ARNs that a API key bearer can perform actions on.

    • The ARN must be the correct ARN for a map, place, or route ARN. You may include wildcards in the resource-id to match multiple resources of the same type.
    • The resources must be in the same partition , region , and account-id as the key that is being created.
    • Other than wildcards, you must include the full ARN, including the arn , partition , service , region , account-id and resource-id delimited by colons (:).
    • No spaces allowed, even with wildcards. For example, arn:aws:geo:region: *account-id* :map/ExampleMap* .

    For more information about ARN format, see Amazon Resource Names (ARNs) .

    allowAndroidApps List<Property Map>
    allowAppleApps List<Property Map>
    allowReferers List<String>

    An optional list of allowed HTTP referers for which requests must originate from. Requests using this API key from other domains will not be allowed.

    Requirements:

    • Contain only alphanumeric characters (A–Z, a–z, 0–9) or any symbols in this list $\-._+!*(),;/?:@=&`
    • May contain a percent (%) if followed by 2 hexadecimal digits (A-F, a-f, 0-9); this is used for URL encoding purposes.
    • May contain wildcard characters question mark (?) and asterisk (*).

    Question mark (?) will replace any single character (including hexadecimal digits).

    Asterisk (*) will replace any multiple characters (including multiple hexadecimal digits).

    • No spaces allowed. For example, https://example.com .

    Tag

    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.59.0
    published on Monday, Mar 30, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws-native
      Try Pulumi Cloud free. Your team will thank you.