Get AWS console role details or start a console session

GET 
/aws-roles/:id

Without switch-console, returns role details including RolePermissions. Missing RoleId raises GE-1034 as GenericFailure → HTTP 500. With switch-console=true, returns {PresignedUrl} for a federated AWS console session if the caller is in UsersAttached (else AUTH-1002). Any other switch-console value returns IPV-1045. Missing role_id header returns AUTH-1001.

Request

Responses

200

AwsRoleDetails, or AwsRoleConsoleSession when switch-console=true.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

400

Validation or authorization failure. Body is {"Message": " - "}. Common codes: AUTH-1001, AUTH-1002 (not in UsersAttached for console session), IPV-1045 (switch-console not true).

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

500

Backend failure. Missing RoleId for details uses GE-1034 (GenericFailure) → HTTP 500: "GE-1034 - There's no role with specified RoleId, Please check RoleId and try again". switch-console with missing role may KeyError into a bare exception Message. Other failures return exception text.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers