Create reseller handshakes (batch)

post

https://api.doit.com/billingtransfer/v1/resellerhandshakes

Maps reseller to distributor; also sends the handshake if required, as part of AWS
billing transfer onboarding. Distributor-only; callers without the ChannelOps distributor
tier entitlement receive 403.

Each item in the batch is processed independently; per-item outcomes are returned in
results[] with HTTP 200 even when some items fail. Malformed items (missing fields,
duplicate resellerPmaAccountId within the batch) are rejected up front with 422 and
reported in invalidItems, and none of the batch is processed in that case.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Query Params

dryRun

boolean

Defaults to false

If true, validates the batch and simulates the outcome without issuing any AWS
Organizations handshakes. The response shape is identical to a real execution.

Body Params

dpmaId

string

required

The distributor's program management account (DPMA) ID issuing the handshakes.

sendHandshakes

boolean

Defaults to false

If true, issues a new AWS Organizations handshake for each item without an existing one. If omitted or false, maps the batch in place without issuing any AWS Organizations handshakes.

items

array of objects

required

length between 1 and 100

Batch items. Duplicate resellerPmaAccountId values within the batch are rejected.

items*

resellerCustomerId

string

required

DoiT customer ID of the reseller's end customer to issue a handshake for.

resellerPmaAccountId

string

required

12-digit AWS account ID of the reseller's program management account (PMA).

Headers

X-Tenant-Id

string

Customer (tenant) ID for the request. This is separate from authentication: you still pass your personal or service account API token in the Authorization header (Bearer <token>). See Get Started.

When to omit (most callers): If your personal or service account token belongs to a single customer, omit this header. The API resolves that customer from the token.

When to send: If your credential can access more than one customer, set X-Tenant-Id to the customer ID you want to act on. Omitting it returns 400 with code tenant_id_required. If the value conflicts with the tenants your credential may access, the request returns 400 with code tenant_id_mismatch. Prefer this header over the legacy customerContext query parameter, which only applies to legacy API keys and is ignored by personal and service account tokens.

Idempotency-Key

string

required

length ≤ 255

Client-generated idempotency key (UUID v4 or ULID recommended, max 255 characters).
Re-submitting the same key with the same request returns the cached response without
re-executing side effects.

Responses

Language

Credentials

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200OK - Batch processed; see results and summary for per-item outcomes.

400Bad Request - The server cannot process the request, often due to a malformed request.

401Unauthorized - Invalid API key.

403Forbidden - The caller is not entitled to the ChannelOps distributor tier, or does not own the referenced dpmaId.

500Internal Server Error - Something went wrong with the DoiT API server.

502Bad Gateway - AWS Organizations was unreachable; retry later.