curl --request POST \
--url https://api.aireserve.com/v1/admin/promote_secret_version \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"secretId": "<string>",
"versionId": "<string>",
"clientId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"region": "<string>"
}
'import requests
url = "https://api.aireserve.com/v1/admin/promote_secret_version"
payload = {
"secretId": "<string>",
"versionId": "<string>",
"clientId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"region": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
secretId: '<string>',
versionId: '<string>',
clientId: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
region: '<string>'
})
};
fetch('https://api.aireserve.com/v1/admin/promote_secret_version', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"status": "executed",
"ok": true,
"summary": "<string>",
"message": "<string>",
"data": "<unknown>",
"secret": "<string>",
"sensitive": true
}{
"status": "refused",
"code": "unknown_op",
"error": "<string>"
}{
"error": "<string>",
"error_description": "<string>"
}{
"status": "refused",
"code": "unknown_op",
"error": "<string>"
}{
"status": "refused",
"code": "unknown_op",
"error": "<string>"
}{
"status": "refused",
"code": "unknown_op",
"error": "<string>"
}{
"status": "executed",
"ok": true,
"summary": "<string>",
"message": "<string>",
"data": "<unknown>",
"secret": "<string>",
"sensitive": true
}{
"error": "<string>",
"error_description": "<string>"
}Roll back: make an older version of a secret AWSCURRENT (version ids from get_secret)
Roll back: make an older version of a secret AWSCURRENT (version ids from get_secret). High stakes: Changes which value tasks and get-secret-value read from now on. The version that is current today becomes AWSPREVIOUS; no value is changed or shown. Interactive clients should confirm with the user first. Runs as the token’s owner within their role; the portal’s own authorization and audit log apply.
curl --request POST \
--url https://api.aireserve.com/v1/admin/promote_secret_version \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"secretId": "<string>",
"versionId": "<string>",
"clientId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"region": "<string>"
}
'import requests
url = "https://api.aireserve.com/v1/admin/promote_secret_version"
payload = {
"secretId": "<string>",
"versionId": "<string>",
"clientId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"region": "<string>"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
secretId: '<string>',
versionId: '<string>',
clientId: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
region: '<string>'
})
};
fetch('https://api.aireserve.com/v1/admin/promote_secret_version', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"status": "executed",
"ok": true,
"summary": "<string>",
"message": "<string>",
"data": "<unknown>",
"secret": "<string>",
"sensitive": true
}{
"status": "refused",
"code": "unknown_op",
"error": "<string>"
}{
"error": "<string>",
"error_description": "<string>"
}{
"status": "refused",
"code": "unknown_op",
"error": "<string>"
}{
"status": "refused",
"code": "unknown_op",
"error": "<string>"
}{
"status": "refused",
"code": "unknown_op",
"error": "<string>"
}{
"status": "executed",
"ok": true,
"summary": "<string>",
"message": "<string>",
"data": "<unknown>",
"secret": "<string>",
"sensitive": true
}{
"error": "<string>",
"error_description": "<string>"
}Authorizations
A management token: minted by the OAuth flow (aireserve login, or an MCP client's Authenticate step) or on the portal Keys page under Management Keys. Inference API keys are refused.
Body
Secret name or ARN
1 - 204832 - 64Target organization id — platform admins only; omit otherwise
^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$AWS region (default us-east-1)
Response
Executed successfully (ok: true).
executed Whether the operation succeeded.
The consent line describing what was done, built from resolved labels.
Human-readable result line.
Operation payload (reads) or detail worth relaying (writes).
A one-time secret the operation minted (API key, credential). Shown once; store it now.
Present exactly when secret is: redact this response from logs.
true