AWS Cloud Map

Name: AWS Cloud Map API
Brand: AWS Cloud Map
Availability: InStock

★ Only Publicly Available OpenAPI DocumentCloud InfrastructureNetworkingapiKey26 EndpointsREST

For Agents

Register and discover service instances dynamically across microservices using AWS Cloud Map. Agents can create namespaces, register instances, and resolve services via DiscoverInstances.

Use for: I need to create a private DNS namespace for an internal microservice mesh, Register a new instance of a service so callers can discover it, Discover all healthy instances of a given service name, Update the custom health status of a registered instance

Not supported: Does not perform load balancing, service-mesh routing, or DNS hosting outside its managed namespaces - use for service registration and discovery only.

Jentic publishes the only available OpenAPI specification for AWS Cloud Map, keeping it validated and agent-ready. Cloud Map is the AWS service-discovery layer for microservices: it lets applications register service instances with a custom name, attach health checks, and resolve them via DNS or an HTTP API at runtime. Agents can create public or private DNS namespaces, define services with DNS or HTTP-only configurations, register and deregister instances, run DiscoverInstances queries, and inspect operation status. The 26 operations cover namespaces, services, instances, and discovery.

Install Jentic One Beta

Connect the AWS Cloud Map to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the AWS Cloud Map, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.

Step 1: Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Famazonaws.com%2Faws-cloud-map" | sh

Step 2: Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Famazonaws.com%2Faws-cloud-map" | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with AWS Cloud Map API.

Create public, private DNS, or HTTP namespaces with CreateHttpNamespace, CreatePrivateDnsNamespace, CreatePublicDnsNamespace

Define services within a namespace and configure their DNS records or health-check behaviour

Resolve services at runtime with DiscoverInstances, optionally filtered by attributes and health

GET STARTED

Start building with AWS Cloud Map API

Explore with Jentic One

View OpenAPI Document

Use Cases

Patterns agents use AWS Cloud Map API for, with concrete tasks.

★ Service Discovery for Containerised Microservices

Teams running ECS, EKS, or hybrid workloads use Cloud Map as a runtime registry. Each service registers itself with attributes such as version and zone, callers use DiscoverInstances to resolve healthy targets, and Cloud Map returns up to eight matching records. Health checks on Route 53 or custom HealthCheckCustomConfig keep unhealthy instances out of results.

CreatePrivateDnsNamespace 'internal.local' on a VPC, CreateService 'orders' under it, RegisterInstance with InstanceId='orders-1' and Attributes containing IPv4 and PORT, then DiscoverInstances to confirm resolution.

Hybrid Service Registry with HTTP Namespaces

When clients cannot use DNS - for example, agents running outside the VPC - an HTTP-only namespace combined with DiscoverInstances replaces DNS resolution with an authenticated HTTP lookup. This lets non-AWS workloads register and discover services through the same Cloud Map control plane.

CreateHttpNamespace 'agents-mesh', CreateService inside it, RegisterInstance for an off-VPC worker, then DiscoverInstances filtered by HealthStatus=HEALTHY.

Operations and Drift Tracking

Long-running Cloud Map operations (namespace creation, service updates, deregistration) return an OperationId. Operators use GetOperation and ListOperations to track completion and detect failures, surfacing drift between intended and actual registry state.

Call ListOperations filtered by Status=PENDING, then GetOperation for each returned id to summarise which namespace or service operations are still in flight.

AI Agent Service Resolution via Jentic

AI agents using Jentic can resolve internal services on demand without holding AWS SDKs or DNS resolvers. The agent searches by intent, loads the DiscoverInstances schema, and executes against vault-stored AWS credentials to obtain healthy targets.

Search Jentic for 'discover service instances in cloud map', execute DiscoverInstances for NamespaceName='internal.local' and ServiceName='orders' with HealthStatus=HEALTHY, and return the resulting Instances array.

Key Endpoints

26 endpoints — jentic publishes the only available openapi specification for aws cloud map, keeping it validated and agent-ready.

METHOD

PATH

DESCRIPTION

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.CreatePrivateDnsNamespace

Create a private DNS namespace inside a VPC

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.CreateHttpNamespace

Create an HTTP-only namespace for service discovery

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.CreateService

Define a service within a namespace

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.RegisterInstance

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.DiscoverInstances

Resolve healthy instances for a service

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.DeregisterInstance

Remove an instance from a service

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.GetOperation

Inspect an async operation by id

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.CreatePrivateDnsNamespace

Create a private DNS namespace inside a VPC

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.CreateHttpNamespace

Create an HTTP-only namespace for service discovery

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.CreateService

Define a service within a namespace

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.RegisterInstance

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.DiscoverInstances

Resolve healthy instances for a service

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.DeregisterInstance

Remove an instance from a service

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.GetOperation

Inspect an async operation by id

Why Jentic?

What agents get from Jentic-routed access to this vendor.

Setup

Wiring AWS Cloud Map by hand means computing SigV4 signatures on every request, picking the right regional servicediscovery host, and handling the X-Amz-Target action routing yourself. Through Jentic you install once, import AWS Cloud Map from the API Directory, store the access keys once, and your agent calls it.

Permission scoping

Cloud Map's actions route through a single endpoint by X-Amz-Target rather than resource ids in the URL path, so scope the agent to the operations it needs, such as DiscoverInstances and RegisterInstance. You choose the operations it may call, so destructive ones like DeregisterInstance or DeleteService are not included unless you add them.

Credential isolation

Your AWS access keys are stored once, encrypted, by your own Jentic One instance and used to sign each Cloud Map request with SigV4 at execution time. They never enter the agent's prompt, logs, or context.

Intent-based discovery

Agents search Jentic by intent such as 'discover service instances' or 'register an instance', and Jentic returns the matching Cloud Map operation with its input schema so the agent calls the right endpoint without browsing the reference docs.

FAQs

Specific to using AWS Cloud Map API through Jentic.

Why is there no official OpenAPI spec for AWS Cloud Map?

AWS does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call AWS Cloud Map via structured tooling. It is validated against the live API and kept up to date. Get started with Jentic One, the self-hosted execution layer.

What authentication does the AWS Cloud Map use?

Cloud Map uses AWS Signature Version 4 with IAM credentials and permissions on the servicediscovery:* actions. Through Jentic, the AWS access key and secret are stored encrypted in the vault and SigV4 signing happens server-side - the agent never handles the raw credential.

Can I discover services without using DNS?

Yes. HTTP-only namespaces and the DiscoverInstances API let clients resolve services over HTTPS without a DNS resolver. This is the recommended path for clients outside the namespace's VPC or for agents that cannot perform DNS lookups.

What are the rate limits for the AWS Cloud Map?

Cloud Map applies standard AWS throttling - control-plane operations like CreateService are limited to a few requests per second per account, while DiscoverInstances supports higher throughput suited for runtime resolution. Throttled calls return a ThrottlingException; retry with exponential backoff.

How do I register a service instance through Jentic?

Through Jentic, search for 'register a service instance in cloud map', load the RegisterInstance schema, and execute with ServiceId, InstanceId, and the Attributes map (typically AWS_INSTANCE_IPV4 and AWS_INSTANCE_PORT). Jentic returns the OperationId so the agent can poll completion via GetOperation.

Is AWS Cloud Map free?

Cloud Map charges per registered service per month and per million DiscoverInstances API calls. Health checks billed by Route 53 apply when DNS-based health checking is enabled; see https://aws.amazon.com/cloud-map/pricing/ for the current rates.

Can I limit what my agent is allowed to do with the AWS Cloud Map API?

Yes. Because Jentic One is self-hosted, your own rules decide which Cloud Map operations and credentials the agent may use, and Cloud Map routes every action through a single endpoint by X-Amz-Target rather than resource ids in the path, so you scope the agent to just the operations it needs, such as DiscoverInstances and RegisterInstance. Destructive operations like DeregisterInstance or DeleteService stay out of reach unless you explicitly add them. The AWS access keys are held encrypted by your own instance and used to sign each request at execution time, so the agent can only ever call the operations you have granted.

AWS Cloud Map

Connect the AWS Cloud Map to your agent

Capabilities

Start building with AWS Cloud Map API

Use Cases

Key Endpoints

Why Jentic?

Related APIs

FAQs