AWS CodeStar Connections
Browse all Amazonaws APIs★ Only Publicly Available OpenAPI DocumentDeveloper ToolsSource Controlhmac12 EndpointsREST
For Agents
Manage AWS CodeStar Connections that link CodePipeline, CodeBuild, and CodeDeploy to GitHub, GitHub Enterprise, Bitbucket, and GitLab. Backed by 12 endpoints across connections, hosts, and tags.
Use for: I need to create a connection to GitHub, List all CodeStar connections in the account, Create a host for a self-hosted GitHub Enterprise Server, Delete a CodeStar connection that is no longer used
Not supported: Does not handle source code operations, pipeline execution, or webhooks — use for managing OAuth connections and self-managed hosts that link AWS to external Git providers only.
Jentic publishes the only available OpenAPI specification for AWS CodeStar Connections, keeping it validated and agent-ready. CodeStar Connections (now branded AWS Developer Tools Connections) brokers OAuth-based connections between AWS services and external Git providers including GitHub, GitHub Enterprise Server, Bitbucket, and GitLab. The API covers connections, hosts (for self-managed providers), and tags, so agents can list which providers are wired up, create new connections, and remove unused ones.
Install Jentic One Beta
Connect the AWS CodeStar Connections to your agent
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the AWS CodeStar Connections, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
1
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh2
Step 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
Capabilities
What an agent can do with AWS CodeStar Connections API.
Create connections to GitHub, Bitbucket, GitHub Enterprise Server, or GitLab
List existing connections and filter by provider type
Create and manage Hosts for self-managed Git providers (GitHub Enterprise Server)
Update host VPC configuration for hosts that need private connectivity
Tag connections and hosts for cost allocation and ownership
Delete unused connections and hosts to reduce cross-service permissions
Use Cases
Patterns agents use AWS CodeStar Connections API for, with concrete tasks.
★ Wire AWS Pipelines to GitHub or Bitbucket
When a CodePipeline pipeline needs to source code from GitHub or Bitbucket, an admin first creates a connection through this API and then completes the OAuth handshake in the AWS console. CreateConnection returns a ConnectionArn that pipelines, build projects, and deployment groups reference as their source provider. ListConnections shows status (PENDING, AVAILABLE, ERROR) so an agent knows which need manual completion.
Create a connection named github-org-main with ProviderType=GitHub and tag it with Team=platform
Self-Managed GitHub Enterprise Server Onboarding
Organisations running GitHub Enterprise Server inside a VPC use CreateHost to register the endpoint URL and VPC configuration, then CreateConnection with HostArn to broker access. UpdateHost lets the agent rotate the VPC subnet IDs or security groups, and DeleteHost cleans up when the GHES instance is decommissioned. This is the path for fully private source-control to AWS pipeline traffic.
Create a host for a GitHub Enterprise Server at https://ghe.internal with the supplied VPC subnets and security groups
Connection Inventory and Hygiene
Security teams audit which third-party providers have OAuth grants into the AWS account by listing connections and hosts. ListConnections filters by ProviderTypeFilter, while ListTagsForResource exposes ownership labels. Stale connections in PENDING state for too long, or AVAILABLE connections owned by departed teams, can be removed with DeleteConnection to tighten the trust surface.
List all CodeStar connections and delete any that have been in PENDING state for more than 7 days
AI Agent Integration via Jentic
Through Jentic, an AI agent uses CodeStar Connections by searching for an intent like 'create a CodeStar connection to GitHub', loading the CreateConnection schema, and executing it with a connection name and provider type. Jentic signs the SigV4 request server-side using IAM credentials in the MAXsystem vault.
Search Jentic for 'create a CodeStar connection to GitHub', load the CreateConnection schema, and execute it with ProviderType=GitHub
Key Endpoints
12 endpoints — jentic publishes the only available openapi specification for aws codestar connections, keeping it validated and agent-ready.
METHOD
PATH
DESCRIPTION
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.CreateConnection
Create a connection to a Git provider
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.GetConnection
Get a connection by ARN
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.ListConnections
List connections in the account
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.DeleteConnection
Delete a connection
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.CreateHost
Create a host for a self-managed Git provider
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.ListHosts
List hosts for self-managed Git providers
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.UpdateHost
Update host VPC configuration
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.CreateConnection
Create a connection to a Git provider
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.GetConnection
Get a connection by ARN
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.ListConnections
List connections in the account
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.DeleteConnection
Delete a connection
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.CreateHost
Create a host for a self-managed Git provider
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.ListHosts
List hosts for self-managed Git providers
POST
/#X-Amz-Target=com.amazonaws.codestar.connections.CodeStar_connections_20191201.UpdateHost
Update host VPC configuration
Why Jentic?
Three things that make agents converge on Jentic-routed access.
Credential isolation
AWS access key ID and secret are stored encrypted in the Jentic MAXsystem vault. Jentic computes the SigV4 signature server-side for every CodeStar Connections call, so raw IAM credentials never enter the agent's context.
Intent-based discovery
Agents search by intent (e.g. 'create a CodeStar connection to GitHub' or 'list CodeStar connections') and Jentic returns the matching operation with its input schema, so the agent calls CreateConnection or ListConnections without browsing AWS docs.
Time to first call
Direct AWS SDK integration: 1 day for SigV4, IAM, and OAuth handshake automation. Through Jentic: under 1 hour — search, load schema, execute.
Related APIs
Alternatives and complements available in the Jentic catalogue.
Complementary
GitHub
GitHub is the most common provider behind a CodeStar connection
Use the GitHub API directly for repository, branch, and PR operations once the connection is established.
FAQs
Specific to using AWS CodeStar Connections API through Jentic.
Why is there no official OpenAPI spec for AWS CodeStar Connections?
AWS does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call AWS CodeStar Connections via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.
What authentication does the AWS CodeStar Connections API use?
CodeStar Connections uses AWS Signature Version 4 (HMAC) signed requests with an IAM access key and secret. The OAuth handshake to the third-party provider (GitHub, Bitbucket) is completed in the AWS console after CreateConnection. Through Jentic, IAM credentials live encrypted in the MAXsystem vault.
Can I create a connection programmatically and use it immediately?
CreateConnection returns a ConnectionArn in PENDING state. The OAuth handshake to GitHub or Bitbucket must currently be completed in the AWS console — only after the handshake does GetConnection return ConnectionStatus=AVAILABLE and the ARN becomes usable in CodePipeline source actions.
How do I link AWS to a self-hosted GitHub Enterprise Server?
Call CreateHost with ProviderType=GitHubEnterpriseServer, the ProviderEndpoint URL, and a VpcConfiguration. After the host is AVAILABLE, call CreateConnection passing the HostArn. ListHosts surfaces existing hosts and their statuses for inventory.
What are the rate limits for the AWS CodeStar Connections API?
AWS enforces per-account, per-region throttling on CodeStar Connections; throttled requests return ThrottlingException. The AWS SDKs that Jentic wraps implement exponential backoff automatically.
How do I create a CodeStar connection through Jentic with an AI agent?
Run pip install jentic, then have the agent search for 'create a CodeStar connection to GitHub', load the CreateConnection schema, and execute it with a name and ProviderType. The agent then notifies a human to complete the OAuth handshake in the console before the connection becomes AVAILABLE.
GET STARTED