Product
Jentic OSThe workplace. An in-house AI platform for every employeeJentic OneSafe access. Agents reach your systems without holding keysJentic AIRThe foundation. Gets your existing platforms ready for AI
Pricing
Developers

GET STARTED

API DirectoryBrowse 10,000+ APIs Ready For AI Agent IntegrationDocumentationGuides and API reference

TOOLS

API ScoringCheck your AI Readiness using our scorecardArazzo UIVisualize Arazzo Workflows As Interactive DocumentationArazzo EditorBuild And Edit Multi-Step API Workflows Visually

COMMUNITY

GitHubOpen source projects and examplesOpen StandardsBuilt on open specs. Never locked in.
Resources
Company
About UsOur mission and teamCareersJoin our teamContactGet in touch
Try it now
Jentic OSJentic OneJentic AIR
Pricing
API DirectoryDocumentationAPI ScoringArazzo UIArazzo EditorGitHubOpen Standards
Resources
About UsCareersContact
Try it now
JenticJentic
Products
  • Jentic OS
  • Jentic One
  • Jentic AIR
For Developers
  • API Directory
  • Documentation
  • GitHub
Company
  • About Jentic
  • Careers
  • Contact Us
  • Trust Centre
ISO/IEC 27001:2022 certification badge issued by Prescient SecurityISO/IEC 27001:2022 certification badge issued by Prescient Security

Information Security Management System

Certified to ISO/IEC 27001:2022 by Prescient Security

AICPA SOC for Service Organizations logoAICPA SOC for Service Organizations logo

SOC 2® Type 1 report

Audited by Prescient Assurance

Terms & Conditions•Privacy Policy•
© 2026 Jentic Technology Ltd. All rights reserved.
2 Grattan Court East, Dublin, D02 VX86, Ireland
Switch to light modeSwitch to dark mode
APIs / Cloud Infrastructure / Amazonaws / AWS Cloud Map
AWS Cloud Map logo

AWS Cloud Map

Browse all Amazonaws APIs
59
AI ReadinessFoundational (C+)59/100
See full scorecard
Agent-ready OpenAPI document · curated by JenticCloud InfrastructureNetworkingapiKey26 EndpointsREST

Know of an official OpenAPI document? Contribute it →

For Agents

Register and discover service instances dynamically across microservices using AWS Cloud Map. Agents can create namespaces, register instances, and resolve services via DiscoverInstances.

Use for: I need to create a private DNS namespace for an internal microservice mesh, Register a new instance of a service so callers can discover it, Discover all healthy instances of a given service name, Update the custom health status of a registered instance

Not supported: Does not perform load balancing, service-mesh routing, or DNS hosting outside its managed namespaces - use for service registration and discovery only.

Jentic publishes the only available OpenAPI specification for AWS Cloud Map, keeping it validated and agent-ready. Cloud Map is the AWS service-discovery layer for microservices: it lets applications register service instances with a custom name, attach health checks, and resolve them via DNS or an HTTP API at runtime. Agents can create public or private DNS namespaces, define services with DNS or HTTP-only configurations, register and deregister instances, run DiscoverInstances queries, and inspect operation status. The 26 operations cover namespaces, services, instances, and discovery.

Jentic One on GithubView OpenAPI Document

Install Jentic One Beta

Connect the AWS Cloud Map to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the AWS Cloud Map, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.

1

Step 1: Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Famazonaws.com%2Faws-cloud-map" | sh
2

Step 2: Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Famazonaws.com%2Faws-cloud-map" | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with AWS Cloud Map API.

Create public, private DNS, or HTTP namespaces with CreateHttpNamespace, CreatePrivateDnsNamespace, CreatePublicDnsNamespace

Define services within a namespace and configure their DNS records or health-check behaviour

Register service instances with attributes via RegisterInstance for clients to discover

Resolve services at runtime with DiscoverInstances, optionally filtered by attributes and health

Inspect health status across all instances in a service with GetInstancesHealthStatus

Track long-running namespace and service operations through GetOperation and ListOperations

Use Cases

Patterns agents use AWS Cloud Map API for, with concrete tasks.

★ Service Discovery for Containerised Microservices

Teams running ECS, EKS, or hybrid workloads use Cloud Map as a runtime registry. Each service registers itself with attributes such as version and zone, callers use DiscoverInstances to resolve healthy targets, and Cloud Map returns up to eight matching records. Health checks on Route 53 or custom HealthCheckCustomConfig keep unhealthy instances out of results.

CreatePrivateDnsNamespace 'internal.local' on a VPC, CreateService 'orders' under it, RegisterInstance with InstanceId='orders-1' and Attributes containing IPv4 and PORT, then DiscoverInstances to confirm resolution.

Hybrid Service Registry with HTTP Namespaces

When clients cannot use DNS - for example, agents running outside the VPC - an HTTP-only namespace combined with DiscoverInstances replaces DNS resolution with an authenticated HTTP lookup. This lets non-AWS workloads register and discover services through the same Cloud Map control plane.

CreateHttpNamespace 'agents-mesh', CreateService inside it, RegisterInstance for an off-VPC worker, then DiscoverInstances filtered by HealthStatus=HEALTHY.

Operations and Drift Tracking

Long-running Cloud Map operations (namespace creation, service updates, deregistration) return an OperationId. Operators use GetOperation and ListOperations to track completion and detect failures, surfacing drift between intended and actual registry state.

Call ListOperations filtered by Status=PENDING, then GetOperation for each returned id to summarise which namespace or service operations are still in flight.

AI Agent Service Resolution via Jentic

AI agents using Jentic can resolve internal services on demand without holding AWS SDKs or DNS resolvers. The agent searches by intent, loads the DiscoverInstances schema, and executes against vault-stored AWS credentials to obtain healthy targets.

Search Jentic for 'discover service instances in cloud map', execute DiscoverInstances for NamespaceName='internal.local' and ServiceName='orders' with HealthStatus=HEALTHY, and return the resulting Instances array.

Key Endpoints

26 endpoints — jentic publishes the only available openapi specification for aws cloud map, keeping it validated and agent-ready.

METHOD

PATH

DESCRIPTION

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.CreatePrivateDnsNamespace

Create a private DNS namespace inside a VPC

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.CreateHttpNamespace

Create an HTTP-only namespace for service discovery

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.CreateService

Define a service within a namespace

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.RegisterInstance

Register a service instance with attributes

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.DiscoverInstances

Resolve healthy instances for a service

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.DeregisterInstance

Remove an instance from a service

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.GetOperation

Inspect an async operation by id

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.CreatePrivateDnsNamespace

Create a private DNS namespace inside a VPC

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.CreateHttpNamespace

Create an HTTP-only namespace for service discovery

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.CreateService

Define a service within a namespace

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.RegisterInstance

Register a service instance with attributes

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.DiscoverInstances

Resolve healthy instances for a service

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.DeregisterInstance

Remove an instance from a service

POST

/#X-Amz-Target=Route53AutoNaming_v20170314.GetOperation

Inspect an async operation by id

Jentic AI Readiness Score

This API is usable in Jentic One now. Its AI-readiness score against Jentic's framework shows where it stands today and where improvements would make it even easier for agents to use.

A

AWS Cloud Map

- Foundational (C+)
59/100
99
Foundational Compliance
56
Developer Experience & Jentic Compatibility
37
AI-Readiness & Agent Experience
94
Agent Usability
50
Security
100
AI Discoverability
Powered by JenticScoring Framework 1.0.0 | Scoring Engine 0.4.0
Show dimension breakdown
99

Foundational Compliance

Base layer of spec validity and structural soundness.

Grade: A+Signals: 4
97%

Lint Results

Aggregated quality score from linter diagnostics, weighted by severity.

100%

Resolution Completeness

Percentage of `$ref` references that resolve successfully.

100%

Specification Validity

Checks whether the API description parses successfully and conforms to its declared specification (e.g., OpenAPI).

100%

Structural Integrity

Structural correctness score based on schema issues using logarithmic dampening.

56

Developer Experience & Jentic Compatibility

Clarity, completeness, and ingestion readiness for developers and tooling.

Grade: CSignals: 4
3%

Example Density

How richly the API is illustrated with examples.

73%

Example Validity

Percentage of examples that conform to their schemas.

50%

Response Coverage

Percentage of operations with complete response definitions (success, client error, server error).

100%

Tooling Readiness

Health of API ingestion, bundling, and resolution within Jentic pipelines.

37

AI-Readiness & Agent Experience

Semantic breadth, depth, and agent comprehension for AI systems.

Grade: FSignals: 4
47%

Description Coverage

Coverage of descriptions across API elements.

0%

Error Standardization

Coverage of RFC 9457 Problem Details for error responses.

100%

OperationId Quality

Coverage, uniqueness, and casing consistency of operationIds for AI inference.

0%

Summary Coverage

Coverage of summaries across operations/tags/info.

94

Agent Usability

Functional utility, complexity comfort, and AI orchestration readiness.

Grade: A+Signals: 1
94%

Complexity Comfort

Agent comfort level based on API operational and structural complexity.

50

Security

Trust, risk posture, and security compliance.

Grade: C-Signals: 1
50%

Authentication Strength

Average quality of security schemes based on authentication method strength (weakest link for OAuth2).

100

AI Discoverability

Findability, semantic richness, and reasoning readiness.

Grade: A+Signals: 1
100%

Descriptive Richness

Clarity and depth of descriptions across API elements.

View full reportHow the score is calculatedMore about the dimensions

Score it yourself

Every API in the directory is allowlisted, so you can re-score it with no key required.

Score your own APIScoring CLI agent skill
npx @jentic/api-scorecard-cli score <openapi-url>

Why Jentic?

What agents get from Jentic-routed access to this vendor.

Setup

Wiring AWS Cloud Map by hand means computing SigV4 signatures on every request, picking the right regional servicediscovery host, and handling the X-Amz-Target action routing yourself. Through Jentic you install once, import AWS Cloud Map from the API Directory, store the access keys once, and your agent calls it.

Permission scoping

Cloud Map's actions route through a single endpoint by X-Amz-Target rather than resource ids in the URL path, so scope the agent to the operations it needs, such as DiscoverInstances and RegisterInstance. You choose the operations it may call, so destructive ones like DeregisterInstance or DeleteService are not included unless you add them.

Credential isolation

Your AWS access keys are stored once, encrypted, by your own Jentic One instance and used to sign each Cloud Map request with SigV4 at execution time. They never enter the agent's prompt, logs, or context.

Intent-based discovery

Agents search Jentic by intent such as 'discover service instances' or 'register an instance', and Jentic returns the matching Cloud Map operation with its input schema so the agent calls the right endpoint without browsing the reference docs.

Related APIs

Alternatives and complements available in the Jentic catalogue.

Complementary

Amazon Route 53

→

DNS hosting that backs Cloud Map's public and private DNS namespaces

Use Route 53 directly for static DNS records; use Cloud Map when the records change dynamically with service registration

Complementary

AWS App Mesh

→

Service mesh that integrates with Cloud Map for service-to-service routing

Combine App Mesh routing with Cloud Map registration when fine-grained traffic policies are needed alongside discovery

Alternative

Amazon EKS

→

Kubernetes-native service discovery via the Kubernetes API; an alternative to Cloud Map inside a single cluster

Use Kubernetes Services inside an EKS cluster; reach for Cloud Map when discovery must span clusters or non-Kubernetes workloads

FAQs

Specific to using AWS Cloud Map API through Jentic.

Why is there no official OpenAPI spec for AWS Cloud Map?

AWS does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call AWS Cloud Map via structured tooling. It is validated against the live API and kept up to date. Get started with Jentic One, the self-hosted execution layer.

What authentication does the AWS Cloud Map use?

Cloud Map uses AWS Signature Version 4 with IAM credentials and permissions on the servicediscovery:* actions. Through Jentic, the AWS access key and secret are stored encrypted in the vault and SigV4 signing happens server-side - the agent never handles the raw credential.

Can I discover services without using DNS?

Yes. HTTP-only namespaces and the DiscoverInstances API let clients resolve services over HTTPS without a DNS resolver. This is the recommended path for clients outside the namespace's VPC or for agents that cannot perform DNS lookups.

What are the rate limits for the AWS Cloud Map?

Cloud Map applies standard AWS throttling - control-plane operations like CreateService are limited to a few requests per second per account, while DiscoverInstances supports higher throughput suited for runtime resolution. Throttled calls return a ThrottlingException; retry with exponential backoff.

How do I register a service instance through Jentic?

Through Jentic, search for 'register a service instance in cloud map', load the RegisterInstance schema, and execute with ServiceId, InstanceId, and the Attributes map (typically AWS_INSTANCE_IPV4 and AWS_INSTANCE_PORT). Jentic returns the OperationId so the agent can poll completion via GetOperation.

Is AWS Cloud Map free?

Cloud Map charges per registered service per month and per million DiscoverInstances API calls. Health checks billed by Route 53 apply when DNS-based health checking is enabled; see https://aws.amazon.com/cloud-map/pricing/ for the current rates.

Can I limit what my agent is allowed to do with the AWS Cloud Map API?

Yes. Because Jentic One is self-hosted, your own rules decide which Cloud Map operations and credentials the agent may use, and Cloud Map routes every action through a single endpoint by X-Amz-Target rather than resource ids in the path, so you scope the agent to just the operations it needs, such as DiscoverInstances and RegisterInstance. Destructive operations like DeregisterInstance or DeleteService stay out of reach unless you explicitly add them. The AWS access keys are held encrypted by your own instance and used to sign each request at execution time, so the agent can only ever call the operations you have granted.

GET STARTED

Start building with AWS Cloud Map API

Explore with Jentic One
View OpenAPI Document