Skip to main content
Version: 3.15

Combine TAP API

The Combine TAP API manages users, servers, groups, AWS role assignments, certificates, alert events, configuration, metadata, and operational tools for a Combine deployment. It also provides CAP and SCAP-compatible endpoints for issuing temporary AWS credentials.

All requests must use HTTPS. Except where explicitly noted, requests require mutual TLS with a valid client certificate issued for the deployment. Requests that modify data must include the X-Requested-By header; this applies to all methods except GET, HEAD, and OPTIONS. Administrative operations require an account with the admin role.

Authentication

Authenticates the caller with an X.509 client certificate issued by the deployment. Combine identifies the caller's user account from the certificate's serial number, and that account's role determines what the caller can access.