What authentication does the AWS CodePipeline API use?

CodePipeline uses AWS Signature Version 4 (HMAC) signed requests with an IAM access key and secret. Through Jentic, IAM credentials live encrypted in your Jentic One instance and the SigV4 signature is computed server-side, so the agent context never holds the raw secret.

Can I approve a manual approval action through the API?

Yes. Call PutApprovalResult with pipelineName, stageName, actionName, the token from GetPipelineState, and a result object containing status (Approved or Rejected) and a summary. The pipeline immediately resumes or terminates based on the status.

How do I retry a failed stage in a CodePipeline execution?

Call RetryStageExecution with the pipelineName, stageName, pipelineExecutionId, and retryMode FAILED_ACTIONS. CodePipeline restarts only the failed actions in that stage and continues forward when they succeed.

What are the rate limits for the AWS CodePipeline API?

AWS enforces per-account, per-region throttling on CodePipeline; ListPipelineExecutions and similar list calls are rate-limited per account. Throttled requests return ThrottlingException - the AWS SDKs that Jentic wraps implement exponential backoff automatically.

How do I start a CodePipeline release through Jentic with an AI agent?

Run pip install jentic, then have the agent search for 'start a CodePipeline execution', load the StartPipelineExecution schema, and execute it with the pipeline name. Poll GetPipelineState for stage status and use PutApprovalResult to clear manual approval gates as criteria are met.

Can I limit what my agent is allowed to do with the AWS CodePipeline API?

Yes. Because CodePipeline routes every operation through the X-Amz-Target header rather than a URL path, your self-hosted Jentic One instance scopes access by operation, and your own rules decide which operations and credentials the agent may use. You can allow only the calls the agent needs, such as StartPipelineExecution or GetPipelineState, so destructive operations like DeletePipeline or DisableStageTransition stay off limits unless you add them. The AWS access key and secret sit encrypted in your instance and are injected only when the signed request runs, so the agent never handles the raw secret.