AWS Cloud9

Name: AWS Cloud9 API
Brand: AWS Cloud9
Availability: InStock

★ Only Publicly Available OpenAPI DocumentDeveloper ToolsProject ManagementapiKey13 EndpointsREST

For Agents

Provision Cloud9 cloud IDE environments on EC2, manage their members and permissions, and tag or delete them when no longer needed.

Use for: I need to create a Cloud9 environment for a new engineer, Add a teammate as a read-write member of a Cloud9 environment, List all Cloud9 environments in this account, Get the status of a specific Cloud9 environment

Not supported: Does not run code, build pipelines, or store source repositories. Use for managing Cloud9 IDE environments and their members only.

AWS Cloud9 is a cloud-based IDE that runs in the browser and is backed by an Amazon EC2 instance or an SSH-accessible server. The API lets you create, list, describe, update, and delete Cloud9 development environments, manage environment members and their permission levels (READ_ONLY, READ_WRITE, OWNER), tag resources, and read environment status. It is most often used to provision short-lived, pre-configured development environments for new joiners, contractors, or workshop attendees without each person installing a full local toolchain.

Install Jentic One Beta

Connect the AWS Cloud9 to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the AWS Cloud9, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.

Step 1: Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Famazonaws.com%2Fcloud9" | sh

Step 2: Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Famazonaws.com%2Fcloud9" | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with AWS Cloud9 API.

Create EC2-backed Cloud9 environments with a chosen instance type, subnet, and idle auto-stop window

Add or remove environment members with READ_ONLY, READ_WRITE, or OWNER permissions

List and describe Cloud9 environments owned by the account

Get current status of an environment (creating, ready, error, deleting)

Update environment settings such as name, description, and managed credentials

GET STARTED

Start building with AWS Cloud9 API

Explore with Jentic One

View OpenAPI Document

Use Cases

Patterns agents use AWS Cloud9 API for, with concrete tasks.

★ Workshop Environment Provisioning

Spin up identical Cloud9 environments for every workshop attendee minutes before the session starts. Use CreateEnvironmentEC2 for each attendee with a small instance type and a 30-minute idle auto-stop, then CreateEnvironmentMembership to invite them as READ_WRITE members. After the session, DeleteEnvironment cleans up everything in one call so there is no leftover EC2 cost.

Loop attendee emails: CreateEnvironmentEC2 with name=workshop-2026-06-{i}, instanceType=t3.small, automaticStopTimeMinutes=30, then CreateEnvironmentMembership with userArn=<attendee> and permissions=READ_WRITE.

New Joiner Onboarding

Give a new engineer a pre-configured browser-based IDE on day one without waiting for laptop setup. Create a Cloud9 environment from a template AMI that already has the team's repos cloned, language toolchains installed, and AWS credentials configured. Add the engineer as OWNER so they can manage their own environment.

CreateEnvironmentEC2 with name=onboarding-jane-doe, ownerArn=arn:aws:iam::...:user/jane.doe, instanceType=t3.medium, subnetId=subnet-xxx, then verify status reaches READY via DescribeEnvironmentStatus.

Contractor Off-Boarding

When a contractor's engagement ends, revoke their Cloud9 access in seconds. List the environments they belong to, call DeleteEnvironmentMembership to remove them from each, or DeleteEnvironment for environments dedicated to their work. Pair with IAM access removal for full off-boarding.

List environments via DescribeEnvironmentMemberships filtered by userArn=<contractor>, then for each call DeleteEnvironmentMembership.

Agent-Driven IDE Provisioning

Let an internal IT agent take a JIRA ticket like 'provision a Cloud9 environment for the new contractor on Project Atlas' and execute it end-to-end. The agent calls Cloud9 through Jentic to create the environment, add the member, and tag it for billing. AWS credentials never leave the vault and the same playbook runs across multiple AWS accounts in an organisation.

Search Jentic for 'create a Cloud9 EC2 environment', execute it with parameters from the ticket, then 'add a member to a Cloud9 environment' with permissions=READ_WRITE, and tag the environment with Project=Atlas and CostCenter=IT.

Key Endpoints

13 endpoints — aws cloud9 is a cloud-based ide that runs in the browser and is backed by an amazon ec2 instance or an ssh-accessible server.

METHOD

PATH

DESCRIPTION

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.CreateEnvironmentEC2

Create an EC2-backed Cloud9 environment

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.DescribeEnvironments

Describe one or more environments

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.ListEnvironments

List environment IDs

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.UpdateEnvironment

Update environment name or description

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.DeleteEnvironment

Delete an environment and its EC2 instance

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.CreateEnvironmentMembership

Invite a user to an environment

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.DescribeEnvironmentMemberships

List members of an environment

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.DeleteEnvironmentMembership

Remove a member from an environment

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.CreateEnvironmentEC2

Create an EC2-backed Cloud9 environment

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.DescribeEnvironments

Describe one or more environments

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.ListEnvironments

List environment IDs

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.UpdateEnvironment

Update environment name or description

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.DeleteEnvironment

Delete an environment and its EC2 instance

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.CreateEnvironmentMembership

Invite a user to an environment

POST

/#X-Amz-Target=AWSCloud9WorkspaceManagementService.DescribeEnvironmentMemberships

List members of an environment

Why Jentic?

What agents get from Jentic-routed access to this vendor.

Setup

Wiring AWS Cloud9 by hand means holding an access key ID and secret access key, computing an AWS Signature Version 4 signature per request, resolving the correct regional cloud9 host with the right X-Amz-Target action header, and handling retries yourself. Through Jentic you install once, import AWS Cloud9 from the API Directory, store the AWS access key once, and your agent calls it.

Permission scoping

Cloud9 sends the environment and membership identifiers in the request body rather than the URL path, so scope your agent by the operations it needs, such as creating an EC2 environment or listing environments. You choose which operations it may call, so actions like deleting an environment or removing a member are not included unless you add them.

Credential isolation

Your AWS access key ID and secret access key are stored once, encrypted, by your own Jentic One instance, and the Signature Version 4 signature is computed at execution time. The raw keys never enter the agent's prompt, logs, or context.

Intent-based discovery

Agents search Jentic by intent such as 'create a Cloud9 environment' or 'add a member to an environment', and Jentic returns the matching AWS Cloud9 operation with its input schema so the agent calls the right action without crawling the AWS reference.

FAQs

Specific to using AWS Cloud9 API through Jentic.

What authentication does the AWS Cloud9 API use?

All requests are signed with AWS Signature Version 4 using an AWS access key ID and secret access key. Through Jentic, those credentials live encrypted in the vault and Jentic performs the signing server-side; the agent only sees a scoped Jentic credential reference.

Can I provision a Cloud9 environment on a specific instance type?

Yes. Pass instanceType to CreateEnvironmentEC2, along with subnetId and an optional automaticStopTimeMinutes for idle auto-stop. Cloud9 launches the chosen EC2 instance, configures the IDE, and reports status via DescribeEnvironmentStatus.

What are the rate limits for the AWS Cloud9 API?

Cloud9 applies standard AWS service throttling and returns ThrottlingException when exceeded. Workshop-style provisioning of dozens of environments at once should pace CreateEnvironmentEC2 calls and use exponential backoff.

How do I add a user to a Cloud9 environment through Jentic?

Search Jentic for 'add a member to a Cloud9 environment', load the CreateEnvironmentMembership schema, and execute it with environmentId, userArn, and permissions set to READ_WRITE or READ_ONLY. The operation maps to CreateEnvironmentMembership and returns the resulting member record.

Is AWS Cloud9 still being supported?

AWS announced that no new customer access to Cloud9 is granted as of mid-2024 for new accounts, but existing customers can continue to use the service and the API remains operational. New deployments should evaluate alternatives such as AWS CodeCatalyst Dev Environments or self-hosted code-server.

Is AWS Cloud9 free to use?

Cloud9 itself has no separate charge. You pay for the underlying EC2 instance, EBS volume, and any data transfer the environment uses. The automaticStopTimeMinutes setting is the simplest way to limit cost when environments are idle.

Can I limit what my agent is allowed to do with the AWS Cloud9 API?

Yes. Because Jentic One is self-hosted, your own rules decide which Cloud9 operations and credentials the agent may use, so you choose the exact actions it can call, such as CreateEnvironmentEC2 and ListEnvironments. Actions like DeleteEnvironment or DeleteEnvironmentMembership stay unavailable to the agent unless you explicitly add them. Since Cloud9 passes environment and membership identifiers in the request body, you scope access at the operation level rather than by URL path.

AWS Cloud9

Connect the AWS Cloud9 to your agent

Capabilities

Start building with AWS Cloud9 API

Use Cases

Key Endpoints

Why Jentic?

Related APIs

FAQs