# Firewall Management Service API

> Firewall Management Service API on Apizie: 42 endpoints (Sets a Firewall Manager default administrator account. The Firewall Manager default administrator account…, Sets the Firewall Manager policy administrator as a tenant administrator of a third-party firewall service.…, Associate resources to a Firewall Manager resource set., Disassociates resources from a Firewall Manager resource set., …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://www.apizie.tech/v1/cloud:amazonaws-fms/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-fms`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://www.apizie.tech/api/cloud/amazonaws-fms
- OpenAPI: https://www.apizie.tech/api/cloud/amazonaws-fms/openapi.json

This is the Firewall Manager API Reference . This guide is for developers who need detailed information about the Firewall Manager API actions, data types, and errors. For detailed information about Firewall Manager…

## Endpoints

### Sets a Firewall Manager default administrator account. The Firewall Manager default administrator account…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/associate-admin-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Sets the Firewall Manager policy administrator as a tenant administrator of a third-party firewall service.…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/associate-third-party-firewall` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Associate resources to a Firewall Manager resource set.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/batch-associate-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Disassociates resources from a Firewall Manager resource set.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/batch-disassociate-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Permanently deletes an Firewall Manager applications list.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/delete-apps-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes an Firewall Manager association with the IAM role and the Amazon Simple Notification Service (SNS)…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/delete-notification-channel` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Permanently deletes an Firewall Manager policy.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/delete-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Permanently deletes an Firewall Manager protocols list.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/delete-protocols-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes the specified ResourceSet .
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/delete-resource-set` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Disassociates an Firewall Manager administrator account. To set a different account as an Firewall Manager…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/disassociate-admin-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Disassociates a Firewall Manager policy administrator from a third-party firewall tenant. When you call…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/disassociate-third-party-firewall` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns the Organizations account that is associated with Firewall Manager as the Firewall Manager default…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/get-admin-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns information about the specified account's administrative scope. The admistrative scope defines the…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/get-admin-scope` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns information about the specified Firewall Manager applications list.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/get-apps-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns detailed compliance information about the specified member account. Details include resources that…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/get-compliance-detail` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Information about the Amazon Simple Notification Service (SNS) topic that is used to record Firewall Manager…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/get-notification-channel` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns information about the specified Firewall Manager policy.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/get-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### If you created a Shield Advanced policy, returns policy-level attack summary information in the event of a…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/get-protection-status` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns information about the specified Firewall Manager protocols list.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/get-protocols-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Gets information about a specific resource set.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/get-resource-set` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### The onboarding status of a Firewall Manager admin account to third-party firewall vendor tenant.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/get-third-party-firewall-association-status` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves violations for a resource based on the specified Firewall Manager policy and Amazon Web Services…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/get-violation-details` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns a AdminAccounts object that lists the Firewall Manager administrators within the organization that…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/list-admin-accounts-for-organization` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Lists the accounts that are managing the specified Organizations member account. This is useful for any…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/list-admins-managing-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns an array of AppsListDataSummary objects.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/list-apps-lists` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns an array of PolicyComplianceStatus objects. Use PolicyComplianceStatus to get a summary of which…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/list-compliance-status` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns an array of resources in the organization's accounts that are available to be associated with a…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/list-discovered-resources` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns a MemberAccounts object that lists the member accounts in the administrator's Amazon Web Services…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/list-member-accounts` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns an array of PolicySummary objects.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/list-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns an array of ProtocolsListDataSummary objects.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/list-protocols-lists` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Returns an array of resources that are currently associated to a resource set.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/list-resource-set-resources` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns an array of ResourceSetSummary objects.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/list-resource-sets` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves the list of tags for the specified Amazon Web Services resource.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/list-tags-for-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves a list of all of the third-party firewall policies that are associated with the third-party…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/list-third-party-firewall-firewall-policies` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Creates or updates an Firewall Manager administrator account. The account must be a member of the…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/put-admin-account` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates an Firewall Manager applications list.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/put-apps-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Designates the IAM role and Amazon Simple Notification Service (SNS) topic that Firewall Manager uses to…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/put-notification-channel` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates an Firewall Manager policy. Firewall Manager provides the following types of policies: An WAF policy…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/put-policy` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates an Firewall Manager protocols list.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/put-protocols-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates the resource set. An Firewall Manager resource set defines the resources to import into an Firewall…
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/put-resource-set` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Adds one or more tags to an Amazon Web Services resource.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/tag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes one or more tags from an Amazon Web Services resource.
`POST https://www.apizie.tech/v1/cloud:amazonaws-fms/untag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

## Example
```
curl "https://www.apizie.tech/v1/cloud:amazonaws-fms/associate-admin-account" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Firewall Management Service API?
Create a free Apizie key, then send POST https://www.apizie.tech/v1/cloud:amazonaws-fms/associate-admin-account with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Firewall Management Service API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Firewall Management Service itself also needs your own key from amazonaws.com.

### Can AI agents use the Firewall Management Service API?
Yes. Add the Apizie MCP server (https://www.apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-fms.

### What is the status of the Firewall Management Service API?
Needs your own provider key (bring your own key)