AWS Cloud Map
Browse all Amazonaws APIs★ Only Publicly Available OpenAPI DocumentCloud InfrastructureNetworkingapiKey26 EndpointsREST
For Agents
Register and discover service instances dynamically across microservices using AWS Cloud Map. Agents can create namespaces, register instances, and resolve services via DiscoverInstances.
Use for: I need to create a private DNS namespace for an internal microservice mesh, Register a new instance of a service so callers can discover it, Discover all healthy instances of a given service name, Update the custom health status of a registered instance
Not supported: Does not perform load balancing, service-mesh routing, or DNS hosting outside its managed namespaces — use for service registration and discovery only.
Jentic publishes the only available OpenAPI specification for AWS Cloud Map, keeping it validated and agent-ready. Cloud Map is the AWS service-discovery layer for microservices: it lets applications register service instances with a custom name, attach health checks, and resolve them via DNS or an HTTP API at runtime. Agents can create public or private DNS namespaces, define services with DNS or HTTP-only configurations, register and deregister instances, run DiscoverInstances queries, and inspect operation status. The 26 operations cover namespaces, services, instances, and discovery.
Install Jentic One Beta
Connect the AWS Cloud Map to your agent
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the AWS Cloud Map, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
1
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh2
Step 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
Capabilities
What an agent can do with AWS Cloud Map API.
Create public, private DNS, or HTTP namespaces with CreateHttpNamespace, CreatePrivateDnsNamespace, CreatePublicDnsNamespace
Define services within a namespace and configure their DNS records or health-check behaviour
Register service instances with attributes via RegisterInstance for clients to discover
Resolve services at runtime with DiscoverInstances, optionally filtered by attributes and health
Inspect health status across all instances in a service with GetInstancesHealthStatus
Track long-running namespace and service operations through GetOperation and ListOperations
Use Cases
Patterns agents use AWS Cloud Map API for, with concrete tasks.
★ Service Discovery for Containerised Microservices
Teams running ECS, EKS, or hybrid workloads use Cloud Map as a runtime registry. Each service registers itself with attributes such as version and zone, callers use DiscoverInstances to resolve healthy targets, and Cloud Map returns up to eight matching records. Health checks on Route 53 or custom HealthCheckCustomConfig keep unhealthy instances out of results.
CreatePrivateDnsNamespace 'internal.local' on a VPC, CreateService 'orders' under it, RegisterInstance with InstanceId='orders-1' and Attributes containing IPv4 and PORT, then DiscoverInstances to confirm resolution.
Hybrid Service Registry with HTTP Namespaces
When clients cannot use DNS — for example, agents running outside the VPC — an HTTP-only namespace combined with DiscoverInstances replaces DNS resolution with an authenticated HTTP lookup. This lets non-AWS workloads register and discover services through the same Cloud Map control plane.
CreateHttpNamespace 'agents-mesh', CreateService inside it, RegisterInstance for an off-VPC worker, then DiscoverInstances filtered by HealthStatus=HEALTHY.
Operations and Drift Tracking
Long-running Cloud Map operations (namespace creation, service updates, deregistration) return an OperationId. Operators use GetOperation and ListOperations to track completion and detect failures, surfacing drift between intended and actual registry state.
Call ListOperations filtered by Status=PENDING, then GetOperation for each returned id to summarise which namespace or service operations are still in flight.
AI Agent Service Resolution via Jentic
AI agents using Jentic can resolve internal services on demand without holding AWS SDKs or DNS resolvers. The agent searches by intent, loads the DiscoverInstances schema, and executes against vault-stored AWS credentials to obtain healthy targets.
Search Jentic for 'discover service instances in cloud map', execute DiscoverInstances for NamespaceName='internal.local' and ServiceName='orders' with HealthStatus=HEALTHY, and return the resulting Instances array.
Key Endpoints
26 endpoints — jentic publishes the only available openapi specification for aws cloud map, keeping it validated and agent-ready.
METHOD
PATH
DESCRIPTION
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.CreatePrivateDnsNamespace
Create a private DNS namespace inside a VPC
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.CreateHttpNamespace
Create an HTTP-only namespace for service discovery
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.CreateService
Define a service within a namespace
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.RegisterInstance
Register a service instance with attributes
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.DiscoverInstances
Resolve healthy instances for a service
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.DeregisterInstance
Remove an instance from a service
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.GetOperation
Inspect an async operation by id
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.CreatePrivateDnsNamespace
Create a private DNS namespace inside a VPC
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.CreateHttpNamespace
Create an HTTP-only namespace for service discovery
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.CreateService
Define a service within a namespace
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.RegisterInstance
Register a service instance with attributes
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.DiscoverInstances
Resolve healthy instances for a service
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.DeregisterInstance
Remove an instance from a service
POST
/#X-Amz-Target=Route53AutoNaming_v20170314.GetOperation
Inspect an async operation by id
Why Jentic?
Three things that make agents converge on Jentic-routed access.
Credential isolation
AWS access keys are stored encrypted in the Jentic vault. Cloud Map calls are signed with SigV4 inside Jentic, so the raw credential never appears in the agent's prompt or runtime.
Intent-based discovery
Agents search by intent (for example, 'discover service instances' or 'register an instance') and Jentic returns the matching Cloud Map operations with parameter schemas, letting the agent invoke DiscoverInstances or RegisterInstance directly.
Time to first call
Direct Cloud Map integration: 1-2 days to wire up SigV4 signing, JSON-RPC style x-amz-target headers, and operation polling. Through Jentic: under 30 minutes — search, load schema, execute.
Related APIs
Alternatives and complements available in the Jentic catalogue.
FAQs
Specific to using AWS Cloud Map API through Jentic.
Why is there no official OpenAPI spec for AWS Cloud Map?
AWS does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call AWS Cloud Map via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.
What authentication does the AWS Cloud Map use?
Cloud Map uses AWS Signature Version 4 with IAM credentials and permissions on the servicediscovery:* actions. Through Jentic, the AWS access key and secret are stored encrypted in the vault and SigV4 signing happens server-side — the agent never handles the raw credential.
Can I discover services without using DNS?
Yes. HTTP-only namespaces and the DiscoverInstances API let clients resolve services over HTTPS without a DNS resolver. This is the recommended path for clients outside the namespace's VPC or for agents that cannot perform DNS lookups.
What are the rate limits for the AWS Cloud Map?
Cloud Map applies standard AWS throttling — control-plane operations like CreateService are limited to a few requests per second per account, while DiscoverInstances supports higher throughput suited for runtime resolution. Throttled calls return a ThrottlingException; retry with exponential backoff.
How do I register a service instance through Jentic?
Through Jentic, search for 'register a service instance in cloud map', load the RegisterInstance schema, and execute with ServiceId, InstanceId, and the Attributes map (typically AWS_INSTANCE_IPV4 and AWS_INSTANCE_PORT). Jentic returns the OperationId so the agent can poll completion via GetOperation.
Is AWS Cloud Map free?
Cloud Map charges per registered service per month and per million DiscoverInstances API calls. Health checks billed by Route 53 apply when DNS-based health checking is enabled; see https://aws.amazon.com/cloud-map/pricing/ for the current rates.
GET STARTED