Combine TAP API
The Combine TAP API manages users, servers, groups, AWS role assignments, certificates, alert events, configuration, metadata, and operational tools for a Combine deployment. It also provides CAP and SCAP-compatible endpoints for issuing temporary AWS credentials.
All requests must use HTTPS. Except where explicitly noted, requests require mutual TLS with a valid client certificate issued for the deployment. Requests that modify data must include the X-Requested-By header; this applies to all methods except GET, HEAD, and OPTIONS. Administrative operations require an account with the admin role.
Authentication
- Mutual TLS
- API Key: xRequestedBy
Authenticates the caller with an X.509 client certificate issued by the deployment. Combine identifies the caller's user account from the certificate's serial number, and that account's role determines what the caller can access.
Required on requests that change data, which is every method except GET, HEAD, and OPTIONS. Combine only checks that the header is present and accepts any value. The health check and OCSP endpoints are exempt.
Security Scheme Type: | apiKey |
|---|---|
Header parameter name: | X-Requested-By |