list-cloudflow-connections
dci list-cloudflow-connections [flags]
Returns a cursor-paginated list of cloud provider connections for the authenticated tenant.
Where the IDs go
connectionId is what get-, update-, and delete-cloudflow-connection take, and what
import-cloudflow-flow expects in bindings.connections when rebinding an exported bundle.
The API does not filter or sort this listing server-side, so use --search to narrow it.
Examples
# The cloud provider connections in your tenant — which clouds your flows can reach.
dci list-cloudflow-connections
# Find connections by keyword (client-side, case-insensitive, scans every page).
dci list-cloudflow-connections --search production
# Just the columns that matter for binding a bundle's requirements.
dci list-cloudflow-connections -C connectionId,name,status,enabled
# Every page as JSON, for scripts.
dci list-cloudflow-connections --all --output json
Flags
| Flag | Type | Default | Example | Description |
|---|---|---|---|---|
--max-results | integer | 50 | Maximum number of connections to return (1–100). Defaults to 50. | |
--page-token | string | Pagination cursor returned by a previous call. |
Every command also accepts the CLI-wide flags for output shaping — see Output formats and Table output options.
Output
OK
By default dci renders the result as a table. Use --output json to get the full structure described below — see Output formats.
| Field | Type | Description |
|---|---|---|
items | array of object | List of connections for the current page. |
items[].connectionId | string | Unique identifier for the connection. |
items[].name | string | |
items[].description | string | |
items[].gcpConfig | object | GCP connection configuration. Server-owned fields (status, deploymentCommand) are excluded. |
items[].gcpConfig.status | string | Server-managed GCP config status. |
items[].gcpConfig.deploymentCommand | string | Generated deployment command. |
items[].gcpConfig.organizationId | string | |
items[].gcpConfig.folderId | string | |
items[].gcpConfig.projectId | string | |
items[].gcpConfig.level | string | One of: "organization", "folder", "project". |
items[].gcpConfig.serviceAccountName | string | |
items[].gcpConfig.predefinedRoles | array of string | |
items[].gcpConfig.customRole | object | |
items[].gcpConfig.customRole.roleId | string | |
items[].gcpConfig.customRole.permissions | array of string | |
items[].gcpConfig.infraManagerProject | string | |
items[].gcpConfig.infraManagerLocation | string | |
items[].gcpConfig.infraManagerServiceAccount | string | |
items[].awsConfig | object | AWS connection configuration. Server-owned fields (context[].status, context[].nextStackOperation, stackSet) are excluded. |
items[].awsConfig.context | array of object | |
items[].awsConfig.context[].accountId | string | |
items[].awsConfig.context[].regions | array of string | |
items[].awsConfig.permissions | object | IAM permissions granted to the CloudFlow role. |
items[].awsConfig.permissions.awsManagedPolicies | array of string | AWS-managed policy ARNs attached to the role. |
items[].awsConfig.permissions.actions | array of object | Custom IAM actions. Nested fields omitted — see the raw JSON schema. |
items[].awsConfig.roleName | string | |
items[].awsConfig.managementAccount | string | |
items[].awsConfig.organizationRootId | string | |
items[].awsConfig.scopeTargetedOrganizationalUnitIds | array of string | |
items[].awsConfig.scopeExplicitAccountIds | array of string | |
items[].awsConfig.scopeExcludedAccountIds | array of string | |
items[].awsConfig.scopeManagementAccountExplicitInScope | boolean | |
items[].collaborators | array of object | |
items[].collaborators[].email | string (email) | |
items[].collaborators[].role | string | One of: "owner", "editor", "user". |
items[].enabled | boolean | false when the connection is disabled. |
items[].status | string | Overall connection status. |
items[].createdAt | string (date-time) | |
items[].updatedAt | string (date-time) | |
items[].etag | string | Current version of the connection. Send it unchanged in If-Match to update or delete. |
pageToken | string | Opaque cursor for the next page. null when there are no more results. |
rowCount | integer | Always null. Row count is not computed for this endpoint. |
Raw JSON schema
{
"type": "object",
"description": "Cursor-paginated list of CloudFlow connections.",
"required": [
"items"
],
"properties": {
"items": {
"type": "array",
"description": "List of connections for the current page.",
"items": {
"type": "object",
"description": "A cloud provider connection used in CloudFlow workflows.",
"properties": {
"connectionId": {
"type": "string",
"description": "Unique identifier for the connection."
},
"name": {
"type": "string"
},
"description": {
"type": "string"
},
"gcpConfig": {
"allOf": [
{
"type": "object",
"description": "GCP connection configuration. Server-owned fields (status, deploymentCommand) are excluded.",
"properties": {
"organizationId": {
"type": "string"
},
"folderId": {
"type": "string"
},
"projectId": {
"type": "string"
},
"level": {
"type": "string",
"enum": [
"organization",
"folder",
"project"
]
},
"serviceAccountName": {
"type": "string"
},
"predefinedRoles": {
"type": "array",
"items": {
"type": "string"
}
},
"customRole": {
"type": "object",
"properties": {
"roleId": {
"type": "string"
},
"permissions": {
"type": "array",
"items": {
"type": "string"
}
}
}
},
"infraManagerProject": {
"type": "string"
},
"infraManagerLocation": {
"type": "string"
},
"infraManagerServiceAccount": {
"type": "string"
}
}
},
{
"type": "object",
"description": "Response extends request schema with server-owned read-only fields.",
"properties": {
"status": {
"type": "string",
"description": "Server-managed GCP config status."
},
"deploymentCommand": {
"type": "string",
"description": "Generated deployment command."
}
}
}
]
},
"awsConfig": {
"allOf": [
{
"type": "object",
"description": "AWS connection configuration. Server-owned fields (context[].status, context[].nextStackOperation, stackSet) are excluded.",
"properties": {
"context": {
"type": "array",
"items": {
"type": "object",
"properties": {
"accountId": {
"type": "string"
},
"regions": {
"type": "array",
"items": {
"type": "string"
}
}
}
}
},
"roleName": {
"type": "string"
},
"permissions": {
"type": "object",
"description": "IAM permissions granted to the CloudFlow role.",
"properties": {
"awsManagedPolicies": {
"type": "array",
"description": "AWS-managed policy ARNs attached to the role.",
"items": {
"type": "string"
}
},
"actions": {
"type": "array",
"description": "Custom IAM actions.",
"items": {
"type": "object",
"description": "A custom IAM action granted to the CloudFlow role.",
"required": [
"value"
],
"properties": {
"value": {
"type": "string",
"description": "IAM action, for example `s3:ListBucket`."
}
}
}
}
}
},
"managementAccount": {
"type": "string"
},
"organizationRootId": {
"type": "string"
},
"scopeTargetedOrganizationalUnitIds": {
"type": "array",
"items": {
"type": "string"
}
},
"scopeExplicitAccountIds": {
"type": "array",
"items": {
"type": "string"
}
},
"scopeExcludedAccountIds": {
"type": "array",
"items": {
"type": "string"
}
},
"scopeManagementAccountExplicitInScope": {
"type": "boolean"
}
}
},
{
"type": "object",
"description": "Response extends request schema with server-owned read-only fields.",
"properties": {
"context": {
"type": "array",
"items": {
"type": "object",
"properties": {
"accountId": {
"type": "string"
},
"regions": {
"type": "array",
"items": {
"type": "string"
}
},
"status": {
"type": "string",
"description": "Server-managed per-account deployment status."
}
}
}
},
"permissions": {
"type": "object",
"description": "Response extends request schema with server-assigned action identifiers.",
"properties": {
"actions": {
"type": "array",
"items": {
"type": "object",
"properties": {
"value": {
"type": "string",
"description": "IAM action, for example `s3:ListBucket`."
},
"id": {
"type": "string",
"description": "Server-returned row identifier. Not used for permission evaluation."
}
}
}
}
}
}
}
}
]
},
"collaborators": {
"type": "array",
"items": {
"type": "object",
"properties": {
"email": {
"type": "string",
"format": "email"
},
"role": {
"type": "string",
"enum": [
"owner",
"editor",
"user"
]
}
}
}
},
"enabled": {
"type": "boolean",
"description": "false when the connection is disabled."
},
"status": {
"type": "string",
"description": "Overall connection status."
},
"createdAt": {
"type": "string",
"format": "date-time"
},
"updatedAt": {
"type": "string",
"format": "date-time"
},
"etag": {
"type": "string",
"description": "Current version of the connection. Send it unchanged in `If-Match` to update or delete."
}
}
}
},
"pageToken": {
"type": "string",
"nullable": true,
"description": "Opaque cursor for the next page. `null` when there are no more results."
},
"rowCount": {
"type": "integer",
"nullable": true,
"description": "Always `null`. Row count is not computed for this endpoint."
}
}
}
Errors
On failure, dci prints a single error message — with a hint when one is available — and exits with a typed code your scripts can branch on. See Errors and exit codes for the full contract.
HTTP status to exit code mapping
| HTTP status | Exit code | Error code | Meaning |
|---|---|---|---|
| 400 | 30 | VALIDATION_ERROR | The arguments or request body were rejected. Review the command's flags and payload. |
| 401 | 10 | AUTHENTICATION_FAILED | Not signed in, or the API token is invalid. Run dci login or check DCI_API_KEY. |
| 403 | 11 | PERMISSION_DENIED | The DoiT user or the active customer context does not have access. |
| 500 | 40 | API_SERVER_ERROR | The API failed to process the request. Retryable; contact DoiT support if it persists. |
Related
- get-cloudflow-connection — Retrieve a connection
- create-cloudflow-connection — Create a connection
- update-cloudflow-connection — Update a connection
- delete-cloudflow-connection — Delete a connection
- import-cloudflow-flow — Import a flow bundle
- API reference: GET /cloudflow/v1/connections
Aliases: listcloudflowconnections