Agent-ready OpenAPI document · curated by JenticCloud InfrastructureServerlessapiKey31 EndpointsREST
Know of an official OpenAPI document? Contribute it →
For Agents
Generate, configure, and remove Amplify backend environments and their auth, API, storage, and config resources programmatically through 31 admin operations.
Use for: I want to clone an existing Amplify backend environment, Generate a backend authentication resource for an Amplify app, List all backend environments for a given Amplify app, Get the configuration for a specific backend environment
Not supported: Does not handle frontend hosting, build pipelines, or branch deployments - use for managing Amplify backend environments and their auth, API, storage, and config resources only.
Jentic publishes the only available OpenAPI specification for AmplifyBackend, keeping it validated and agent-ready. AWS AmplifyBackend is the admin API that powers backend resource generation for Amplify Hosting applications, including auth, API, storage, and config resources tied to specific Amplify backend environments. The API exposes 31 operations to clone, configure, list, and remove backends, manage authentication and API resources, and import existing Cognito user pools. Platform teams use it to script Amplify CLI generated backends from CI rather than developer machines.
Install Jentic One Beta
Connect the AmplifyBackend to your agent
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the AmplifyBackend, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
1
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Famazonaws.com%2Famplifybackend" | sh2
Step 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Famazonaws.com%2Famplifybackend" | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
Capabilities
What an agent can do with AmplifyBackend API.
Clone an existing Amplify backend environment to spin up an isolated dev or QA stack
Generate auth resources backed by Amazon Cognito user pools and identity pools
Generate API resources for REST and GraphQL backends with associated Lambda and DynamoDB infrastructure
Configure storage backends backed by S3 with per-user access rules
Import an existing Cognito user pool so multiple Amplify environments share the same identity
Inspect and remove backend resources without leaving orphaned CloudFormation stacks
Use Cases
Patterns agents use AmplifyBackend API for, with concrete tasks.
★ Programmatic Backend Environment Cloning
Platform teams use CloneBackend to copy a working backend environment into a new one for QA, staging, or feature work without rerunning the full Amplify CLI flow. The clone preserves auth, API, storage, and config so the new environment can be wired to a different Amplify Hosting branch and used by reviewers or QA testers within minutes.
Call POST /backend/{appId}/environments/{backendEnvironmentName}/clone with TargetEnvironmentName=qa to copy an existing backend
Auth Resource Generation
Application teams use the auth endpoints to generate Cognito-backed authentication for an Amplify app from a structured config rather than the local CLI. CreateBackendAuth provisions a Cognito user pool and identity pool with the requested settings, and UpdateBackendAuth applies subsequent changes. The same flow can be triggered from a CI job, so backend changes deploy alongside frontend changes.
Call POST /backend/{appId}/auth with ResourceConfig describing the Cognito user pool and identity pool requirements for the target environment
Existing Cognito Pool Import
Teams that already have a Cognito user pool use ImportBackendAuth to attach it to a new Amplify backend rather than duplicating identities. The same pool then underpins the Amplify generated client config so frontends authenticate against the existing identity store, making it straightforward to migrate legacy apps onto Amplify without forcing user resets.
Call POST /backend/{appId}/auth/{backendEnvironmentName}/import with the existing UserPoolId, IdentityPoolId, and NativeClientId
AI Agent Backend Provisioner
An AI agent invoked through Jentic provisions a new Amplify backend environment for each new microsite or experiment. The agent searches Jentic for the create-backend-auth and create-backend-api operations, executes them with the requested resource configs, and reports the resulting endpoints back to a chat workflow. Jentic handles SigV4 signing, so the agent only deals with the structured ResourceConfig payloads.
Search Jentic for create amplify backend auth, execute it with the auth resource config, then create matching API and storage resources for the same backend environment
Key Endpoints
31 endpoints — jentic publishes the only available openapi specification for amplifybackend, keeping it validated and agent-ready.
METHOD
PATH
DESCRIPTION
POST
/backend
Create a new Amplify backend
POST
/backend/{appId}/environments/{backendEnvironmentName}/clone
Clone an existing backend environment into a new one
POST
/backend/{appId}/auth
Create a Cognito-based auth resource for the backend
POST
/backend/{appId}/api
Create a REST or GraphQL API resource for the backend
POST
/backend/{appId}/storage
Create an S3-backed storage resource for the backend
POST
/backend/{appId}/environments/{backendEnvironmentName}/remove
Remove a backend environment and its associated resources
POST
/backend
Create a new Amplify backend
POST
/backend/{appId}/environments/{backendEnvironmentName}/clone
Clone an existing backend environment into a new one
POST
/backend/{appId}/auth
Create a Cognito-based auth resource for the backend
POST
/backend/{appId}/api
Create a REST or GraphQL API resource for the backend
POST
/backend/{appId}/storage
Create an S3-backed storage resource for the backend
POST
/backend/{appId}/environments/{backendEnvironmentName}/remove
Remove a backend environment and its associated resources
Jentic AI Readiness Score
This API is usable in Jentic One now. Its AI-readiness score against Jentic's framework shows where it stands today and where improvements would make it even easier for agents to use.
A
AmplifyBackend
- AI-Aware (B-)62/100
99
Foundational Compliance63
Developer Experience & Jentic Compatibility39
AI-Readiness & Agent Experience94
Agent Usability50
Security100
AI DiscoverabilityPowered by JenticScoring Framework 1.0.0 | Scoring Engine 0.4.0
Show dimension breakdown
99
Foundational Compliance
Base layer of spec validity and structural soundness.
Grade: A+Signals: 4
96%
Lint Results
Aggregated quality score from linter diagnostics, weighted by severity.
100%
Resolution Completeness
Percentage of `$ref` references that resolve successfully.
100%
Specification Validity
Checks whether the API description parses successfully and conforms to its declared specification (e.g., OpenAPI).
100%
Structural Integrity
Structural correctness score based on schema issues using logarithmic dampening.
63
Developer Experience & Jentic Compatibility
Clarity, completeness, and ingestion readiness for developers and tooling.
Grade: B-Signals: 4
0%
Example Density
How richly the API is illustrated with examples.
100%
Example Validity
Percentage of examples that conform to their schemas.
50%
Response Coverage
Percentage of operations with complete response definitions (success, client error, server error).
100%
Tooling Readiness
Health of API ingestion, bundling, and resolution within Jentic pipelines.
39
AI-Readiness & Agent Experience
Semantic breadth, depth, and agent comprehension for AI systems.
Grade: FSignals: 4
56%
Description Coverage
Coverage of descriptions across API elements.
0%
Error Standardization
Coverage of RFC 9457 Problem Details for error responses.
100%
OperationId Quality
Coverage, uniqueness, and casing consistency of operationIds for AI inference.
0%
Summary Coverage
Coverage of summaries across operations/tags/info.
94
Agent Usability
Functional utility, complexity comfort, and AI orchestration readiness.
Grade: A+Signals: 1
94%
Complexity Comfort
Agent comfort level based on API operational and structural complexity.
50
Security
Trust, risk posture, and security compliance.
Grade: C-Signals: 1
50%
Authentication Strength
Average quality of security schemes based on authentication method strength (weakest link for OAuth2).
100
AI Discoverability
Findability, semantic richness, and reasoning readiness.
Grade: A+Signals: 1
100%
Descriptive Richness
Clarity and depth of descriptions across API elements.
Score it yourself
Every API in the directory is allowlisted, so you can re-score it with no key required.
npx @jentic/api-scorecard-cli score <openapi-url>Why Jentic?
What agents get from Jentic-routed access to this vendor.
Setup
Wiring AmplifyBackend by hand means signing every admin request with AWS Signature Version 4 and resolving the amplifybackend.{region}.amazonaws.com host for your region. Through Jentic you install once, import AmplifyBackend from the API Directory, store your AWS access key and secret once, and your agent calls it.
Permission scoping
AmplifyBackend puts the app id and environment name in the URL path (/backend/{appId}/auth, /backend/{appId}/environments/{backendEnvironmentName}/clone, and similar), so a rule can pin the agent to one app's backend environments and their auth, API, and storage resources. You choose the operations it may call, so destructive ones like the environment remove at /backend/{appId}/environments/{backendEnvironmentName}/remove are not included unless you add them.
Credential isolation
Your AWS access key and secret are stored once, encrypted, by your own Jentic One instance and injected at execution time. They never enter the agent's prompt, logs, or context.
Intent-based discovery
Agents search Jentic by intent such as 'clone an Amplify backend environment' or 'create a Cognito-based auth resource', and Jentic returns the matching AmplifyBackend operation with its ResourceConfig schema so the agent does not have to map operation names to AWS path conventions.
Related APIs
Alternatives and complements available in the Jentic catalogue.
FAQs
Specific to using AmplifyBackend API through Jentic.
Why is there no official OpenAPI spec for AmplifyBackend?
AWS does not publish an OpenAPI specification for AmplifyBackend; the official surface is the AWS SDKs and the Smithy model. Jentic generates and maintains this spec so that AI agents and developers can call AmplifyBackend via structured tooling. It is validated against the live API and kept up to date. Get started with Jentic One, the self-hosted execution layer.
What authentication does the AmplifyBackend API use?
AmplifyBackend uses AWS Signature Version 4 (SigV4) signed with an IAM access key id and secret access key, optionally with an STS session token. Through Jentic the access key id and secret access key are stored encrypted in the vault and SigV4 signing is performed server side, so the agent never sees the raw secret access key.
Can I clone an existing Amplify backend with the AmplifyBackend API?
Yes. POST /backend/{appId}/environments/{backendEnvironmentName}/clone with a TargetEnvironmentName produces a new backend environment with the same auth, API, storage, and config as the source. It is the API equivalent of amplify env add --copy-from-existing in the Amplify CLI.
What are the rate limits for the AmplifyBackend API?
AmplifyBackend applies per-region throttling on each operation. Most mutating operations like CreateBackendAuth and CreateBackendAPI are throttled at lower rates than read operations like GetBackend and ListBackendJobs. Persistent throttling returns ThrottlingException; back off with exponential delay and retry.
How do I generate a backend auth resource with the AmplifyBackend API through Jentic?
Install the SDK with pip install jentic, search Jentic for create amplify backend auth, load the CreateBackendAuth operation schema, and execute it with a ResourceConfig describing the Cognito user pool and identity pool you need. Jentic handles SigV4 signing and returns the JobId you can poll with GetBackendJob until the resource is ready.
Can I import an existing Cognito user pool into an Amplify backend?
Yes. POST /backend/{appId}/auth/{backendEnvironmentName}/import with the existing UserPoolId, IdentityPoolId, and NativeClientId attaches the pool to the backend instead of creating a new one. This is the recommended path when migrating an existing app onto Amplify Hosting without forcing users to reset credentials.
Can I limit what my agent is allowed to do with the AmplifyBackend API?
Yes. Because you run Jentic One self-hosted, your own rules decide which AmplifyBackend operations and credentials the agent may use. Since the API puts the app id and environment name in the URL path, such as /backend/{appId}/auth and /backend/{appId}/environments/{backendEnvironmentName}/clone, you can pin the agent to a single app's backend environments and their auth, API, and storage resources. You also choose the exact operations it may call, so a destructive one like the environment remove at /backend/{appId}/environments/{backendEnvironmentName}/remove is excluded unless you add it.
GET STARTED