AWS Step Functions actions

This page provides a reference for AWS Step Functions actions available in the workflow automation actions catalog. Use these actions to start, stop, redrive, and inspect Step Functions executions and state machines from within your workflow definitions.

Prerequisites

Before using AWS Step Functions actions in workflow automation, ensure you have:

An AWS account with appropriate permissions.
AWS credentials configured (IAM user credentials, IAM role ARN, or session credentials).
The necessary IAM permissions for Step Functions operations.

See Set up AWS credentials for information on how to create IAM users and IAM roles, and set up static and session AWS credentials for integration with workflow automation AWS actions.

Required IAM permissions

The permissions you need depend on which Step Functions actions your workflow calls. Use the example below as a template for a least-privilege policy covering all seven actions.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "states:StartExecution",
        "states:StopExecution",
        "states:RedriveExecution",
        "states:DescribeExecution",
        "states:ListExecutions",
        "states:DescribeStateMachine",
        "states:ListStateMachines"
      ],
      "Resource": "arn:aws:states:<region>:<account-id>:*"
    }
  ]
}

Important

Replace <region> and <account-id> with your actual values, and restrict the Resource to specific state machine or execution ARNs where possible.

Start a Step Functions execution

The action identifier is aws.stepFunctions.startExecution.

Starts an execution of an AWS Step Functions state machine. On success, returns the executionArn of the new execution, which you can pass to aws.stepFunctions.describeExecution to poll its status.

The following table describes all available input fields for this action.

Input	Type	Description	Example
awsRoleArn	String	Optional. IAM Role ARN to assume. Recommended. Takes precedence over key-based credentials when you supply both.	`arn:aws:iam::123456789012:role/my-workflow-role`
awsAccessKeyId	String (secret)	Optional. AWS access key ID. Must be passed as a secret.	`${{ :secrets:awsAccessKeyId }}`
awsSecretAccessKey	String (secret)	Optional. AWS secret access key. Must be passed as a secret.	`${{ :secrets:awsSecretAccessKey }}`
awsSessionToken	String (secret)	Optional. AWS session token for temporary credentials. Must be passed as a secret.	`${{ :secrets:awsSessionToken }}`
region	String	Required. AWS region where the state machine is deployed.	`us-east-1`
stateMachineArn	String	Required. ARN of the state machine to execute.	`arn:aws:states:us-east-1:123456789012:stateMachine:RestartUnhealthyService`
name	String	Optional. Execution name. Must be unique per state machine. Auto-generated as a UUID if omitted. On `STANDARD` state machines, reusing a running execution's name with different input returns `ExecutionAlreadyExists`. On `EXPRESS` state machines, names can be reused immediately.	`incident-42`
input	String	Optional. JSON string to pass as input to the execution.	`'{"instanceId": "i-0123456789abcdef0"}'`
traceHeader	String	Optional. X-Ray trace header to propagate into the execution.	`Root=1-5e1b2f1a-3c1a1a1a1a1a1a1a1a1a1a1a`
selectors	List	Optional. JQ selectors to extract specific fields from the action output.	`[{"name": "executionArn", "expression": ".response.executionArn"}]`

The following table describes all output fields returned by this action.

Output	Type	Description
response	Object	Response from the AWS Step Functions API. `{ "executionArn": "arn:aws:states:us-east-1:123456789012:execution:RestartUnhealthyService:incident-42", "startDate": "2026-08-24T09:00:00.000Z" }`
success	Boolean	`true` on success, `false` on failure.
errorMessage	String	Error message if the execution failed to start. `null` on success.

The following example starts a remediation execution and captures the execution ARN for downstream steps.

Workflow example
name: start-sfn-remediation description: 'Starts a Step Functions remediation execution' workflowInputs: arnRole: type: String stateMachineArn: type: String incidentId: type: String steps: - name: startRemediation type: action action: aws.stepFunctions.startExecution version: '1' inputs: awsRoleArn: ${{ .workflowInputs.arnRole }} region: us-east-1 stateMachineArn: ${{ .workflowInputs.stateMachineArn }} name: incident-${{ .workflowInputs.incidentId }} input: '{"incidentId": "${{ .workflowInputs.incidentId }}"}' selectors: - name: executionArn expression: '.response.executionArn'

Workflow example

name: start-sfn-remediation
description: 'Starts a Step Functions remediation execution'

workflowInputs:
  arnRole:
    type: String
  stateMachineArn:
    type: String
  incidentId:
    type: String

steps:
  - name: startRemediation
    type: action
    action: aws.stepFunctions.startExecution
    version: '1'
    inputs:
      awsRoleArn: ${{ .workflowInputs.arnRole }}
      region: us-east-1
      stateMachineArn: ${{ .workflowInputs.stateMachineArn }}
      name: incident-${{ .workflowInputs.incidentId }}
      input: '{"incidentId": "${{ .workflowInputs.incidentId }}"}'
      selectors:
        - name: executionArn
          expression: '.response.executionArn'

Stop a Step Functions execution

The action identifier is aws.stepFunctions.stopExecution.

Stops a running Step Functions execution. AWS marks the execution as ABORTED once it stops.

Important

This action is only supported on STANDARD state machines. It cannot stop EXPRESS executions.

The following table describes all available input fields for this action.

Input	Type	Description	Example
awsRoleArn	String	Optional. IAM Role ARN to assume. Recommended. Takes precedence over key-based credentials when you supply both.	`arn:aws:iam::123456789012:role/my-workflow-role`
awsAccessKeyId	String (secret)	Optional. AWS access key ID. Must be passed as a secret.	`${{ :secrets:awsAccessKeyId }}`
awsSecretAccessKey	String (secret)	Optional. AWS secret access key. Must be passed as a secret.	`${{ :secrets:awsSecretAccessKey }}`
awsSessionToken	String (secret)	Optional. AWS session token for temporary credentials. Must be passed as a secret.	`${{ :secrets:awsSessionToken }}`
region	String	Required. AWS region where the execution is running.	`us-east-1`
executionArn	String	Required. ARN of the execution to stop.	`arn:aws:states:us-east-1:123456789012:execution:RestartUnhealthyService:incident-42`
error	String	Optional. Short error code describing why the execution was stopped.	`TimeoutFromWorkflowAutomation`
cause	String	Optional. Human-readable explanation of why the execution was stopped.	`Remediation exceeded 10 minute SLA, aborted by workflow`
selectors	List	Optional. JQ selectors to extract specific fields from the action output.	`[{"name": "stopDate", "expression": ".response.stopDate"}]`

The following table describes all output fields returned by this action.

Output	Type	Description
response	Object	Response from the AWS Step Functions API. `{ "stopDate": "2026-08-24T09:15:30.000Z" }`
success	Boolean	`true` on success, `false` on failure.
errorMessage	String	Error message if stopping the execution failed. `null` on success.

The following example aborts an execution that has exceeded its SLA.

Workflow example
`name: abort-stuck-sfn-run description: 'Aborts a Step Functions execution that exceeded its SLA' workflowInputs: arnRole: type: String executionArn: type: String steps: - name: abortStuckRun type: action action: aws.stepFunctions.stopExecution version: '1' inputs: awsRoleArn: ${{ .workflowInputs.arnRole }} region: us-east-1 executionArn: ${{ .workflowInputs.executionArn }} error: 'TimeoutFromWorkflowAutomation' cause: 'Remediation exceeded 10 minute SLA, aborted by workflow'`

Workflow example

name: abort-stuck-sfn-run
description: 'Aborts a Step Functions execution that exceeded its SLA'

workflowInputs:
  arnRole:
    type: String
  executionArn:
    type: String

steps:
  - name: abortStuckRun
    type: action
    action: aws.stepFunctions.stopExecution
    version: '1'
    inputs:
      awsRoleArn: ${{ .workflowInputs.arnRole }}
      region: us-east-1
      executionArn: ${{ .workflowInputs.executionArn }}
      error: 'TimeoutFromWorkflowAutomation'
      cause: 'Remediation exceeded 10 minute SLA, aborted by workflow'

Redrive a Step Functions execution

The action identifier is aws.stepFunctions.redriveExecution.

Redrives a failed, timed-out, or aborted Step Functions execution, resuming it from the last unsuccessful state without starting over from the beginning.

Important

This action is only supported on STANDARD state machines. An execution can only be redriven if it has not SUCCEEDED, is within 14 days of completion, and has fewer than 24,999 history events.

The following table describes all available input fields for this action.

Input	Type	Description	Example
awsRoleArn	String	Optional. IAM Role ARN to assume. Recommended. Takes precedence over key-based credentials when you supply both.	`arn:aws:iam::123456789012:role/my-workflow-role`
awsAccessKeyId	String (secret)	Optional. AWS access key ID. Must be passed as a secret.	`${{ :secrets:awsAccessKeyId }}`
awsSecretAccessKey	String (secret)	Optional. AWS secret access key. Must be passed as a secret.	`${{ :secrets:awsSecretAccessKey }}`
awsSessionToken	String (secret)	Optional. AWS session token for temporary credentials. Must be passed as a secret.	`${{ :secrets:awsSessionToken }}`
region	String	Required. AWS region where the execution ran.	`us-east-1`
executionArn	String	Required. ARN of the execution to redrive.	`arn:aws:states:us-east-1:123456789012:execution:RestartUnhealthyService:incident-42`
clientToken	String	Optional. Idempotency token for the redrive request. Auto-generated by the SDK if omitted.	`a1b2c3d4-e5f6-7890-abcd-ef1234567890`
selectors	List	Optional. JQ selectors to extract specific fields from the action output.	`[{"name": "redriveDate", "expression": ".response.redriveDate"}]`

The following table describes all output fields returned by this action.

Output	Type	Description
response	Object	Response from the AWS Step Functions API. `{ "redriveDate": "2026-08-24T09:20:00.000Z" }`
success	Boolean	`true` on success, `false` on failure.
errorMessage	String	Error message if the redrive failed. `null` on success.

The following example redrives a failed execution to resume it from its last unsuccessful state.

Workflow example
`name: retry-failed-sfn-execution description: 'Redrives a failed Step Functions execution from its last unsuccessful state' workflowInputs: arnRole: type: String executionArn: type: String steps: - name: retryFailedRemediation type: action action: aws.stepFunctions.redriveExecution version: '1' inputs: awsRoleArn: ${{ .workflowInputs.arnRole }} region: us-east-1 executionArn: ${{ .workflowInputs.executionArn }} selectors: - name: redriveDate expression: '.response.redriveDate'`

Workflow example

name: retry-failed-sfn-execution
description: 'Redrives a failed Step Functions execution from its last unsuccessful state'

workflowInputs:
  arnRole:
    type: String
  executionArn:
    type: String

steps:
  - name: retryFailedRemediation
    type: action
    action: aws.stepFunctions.redriveExecution
    version: '1'
    inputs:
      awsRoleArn: ${{ .workflowInputs.arnRole }}
      region: us-east-1
      executionArn: ${{ .workflowInputs.executionArn }}
      selectors:
        - name: redriveDate
          expression: '.response.redriveDate'

Describe a Step Functions execution

The action identifier is aws.stepFunctions.describeExecution.

Returns the status, input, output, and timestamps for a Step Functions execution. Use this action to poll the result of an execution started by aws.stepFunctions.startExecution.

Important

This action supports STANDARD state machine executions directly. You can only describe EXPRESS executions that a Map Run dispatched.

The following table describes all available input fields for this action.

Input	Type	Description	Example
awsRoleArn	String	Optional. IAM Role ARN to assume. Recommended. Takes precedence over key-based credentials when you supply both.	`arn:aws:iam::123456789012:role/my-workflow-role`
awsAccessKeyId	String (secret)	Optional. AWS access key ID. Must be passed as a secret.	`${{ :secrets:awsAccessKeyId }}`
awsSecretAccessKey	String (secret)	Optional. AWS secret access key. Must be passed as a secret.	`${{ :secrets:awsSecretAccessKey }}`
awsSessionToken	String (secret)	Optional. AWS session token for temporary credentials. Must be passed as a secret.	`${{ :secrets:awsSessionToken }}`
region	String	Required. AWS region where the execution ran.	`us-east-1`
executionArn	String	Required. ARN of the execution to describe.	`arn:aws:states:us-east-1:123456789012:execution:RestartUnhealthyService:incident-42`
includedData	Enum	Optional. Controls whether the execution definition is returned. Use `METADATA_ONLY` to skip decrypting the definition when `kms:Decrypt` permission is unavailable. Defaults to `ALL_DATA`.	`ALL_DATA` or `METADATA_ONLY`
selectors	List	Optional. JQ selectors to extract specific fields from the action output.	`[{"name": "status", "expression": ".response.status"}]`

The following table describes all output fields returned by this action.

Output	Type	Description
response	Object	Execution details from the AWS Step Functions API. On `FAILED`, `TIMED_OUT`, or `ABORTED` executions, `output` is absent and the API populates `error` / `cause` instead. `redriveStatus` indicates whether the execution can be redriven. `{ "executionArn": "arn:aws:states:us-east-1:123456789012:execution:RestartUnhealthyService:incident-42", "stateMachineArn": "arn:aws:states:us-east-1:123456789012:stateMachine:RestartUnhealthyService", "name": "incident-42", "status": "SUCCEEDED", "startDate": "2026-08-24T09:00:00.000Z", "stopDate": "2026-08-24T09:02:15.000Z", "input": "{\"incidentId\": \"42\"}", "output": "{\"result\": \"resolved\"}", "redriveCount": 0, "redriveStatus": "NOT_REDRIVABLE" }`
success	Boolean	`true` on success, `false` on failure.
errorMessage	String	Error message if the request failed. `null` on success.

Output

Type

Description

response

Object

Execution details from the AWS Step Functions API. On FAILED, TIMED_OUT, or ABORTED executions, output is absent and the API populates error / cause instead. redriveStatus indicates whether the execution can be redriven.

{
  "executionArn": "arn:aws:states:us-east-1:123456789012:execution:RestartUnhealthyService:incident-42",
  "stateMachineArn": "arn:aws:states:us-east-1:123456789012:stateMachine:RestartUnhealthyService",
  "name": "incident-42",
  "status": "SUCCEEDED",
  "startDate": "2026-08-24T09:00:00.000Z",
  "stopDate": "2026-08-24T09:02:15.000Z",
  "input": "{\"incidentId\": \"42\"}",
  "output": "{\"result\": \"resolved\"}",
  "redriveCount": 0,
  "redriveStatus": "NOT_REDRIVABLE"
}

success

Boolean

true on success, false on failure.

errorMessage

String

Error message if the request failed. null on success.

The following example polls the status of an execution and captures the output for downstream steps.

Workflow example
`name: check-sfn-execution-status description: 'Polls the status and output of a Step Functions execution' workflowInputs: arnRole: type: String executionArn: type: String steps: - name: checkStatus type: action action: aws.stepFunctions.describeExecution version: '1' inputs: awsRoleArn: ${{ .workflowInputs.arnRole }} region: us-east-1 executionArn: ${{ .workflowInputs.executionArn }} selectors: - name: status expression: '.response.status' - name: output expression: '.response.output'`

Workflow example

name: check-sfn-execution-status
description: 'Polls the status and output of a Step Functions execution'

workflowInputs:
  arnRole:
    type: String
  executionArn:
    type: String

steps:
  - name: checkStatus
    type: action
    action: aws.stepFunctions.describeExecution
    version: '1'
    inputs:
      awsRoleArn: ${{ .workflowInputs.arnRole }}
      region: us-east-1
      executionArn: ${{ .workflowInputs.executionArn }}
      selectors:
        - name: status
          expression: '.response.status'
        - name: output
          expression: '.response.output'

List Step Functions executions

The action identifier is aws.stepFunctions.listExecutions.

Lists executions of an AWS Step Functions state machine or map run, optionally filtered by status. Results are sorted most-recent first.

The following table describes all available input fields for this action.

Input	Type	Description	Example
awsRoleArn	String	Optional. IAM Role ARN to assume. Recommended. Takes precedence over key-based credentials when you supply both.	`arn:aws:iam::123456789012:role/my-workflow-role`
awsAccessKeyId	String (secret)	Optional. AWS access key ID. Must be passed as a secret.	`${{ :secrets:awsAccessKeyId }}`
awsSecretAccessKey	String (secret)	Optional. AWS secret access key. Must be passed as a secret.	`${{ :secrets:awsSecretAccessKey }}`
awsSessionToken	String (secret)	Optional. AWS session token for temporary credentials. Must be passed as a secret.	`${{ :secrets:awsSessionToken }}`
region	String	Required. AWS region to list executions in.	`us-east-1`
stateMachineArn	String	Optional. ARN of the state machine whose executions to list. Provide this or `mapRunArn`, not both. `EXPRESS` state machines are not directly listable — use `mapRunArn` to list their child executions from a Distributed Map instead.	`arn:aws:states:us-east-1:123456789012:stateMachine:RestartUnhealthyService`
mapRunArn	String	Optional. ARN of the map run whose child executions to list. Provide this or `stateMachineArn`, not both. Required when using `statusFilter: PENDING_REDRIVE`.	`arn:aws:states:us-east-1:123456789012:mapRun:MyStateMachine/abcd1234`
statusFilter	Enum	Optional. Filter executions by status. `PENDING_REDRIVE` requires `mapRunArn`.	`RUNNING` \| `SUCCEEDED` \| `FAILED` \| `TIMED_OUT` \| `ABORTED` \| `PENDING_REDRIVE`
maxResults	Int	Optional. Maximum number of executions to return. Defaults to 100, maximum 1000.	`20`
nextToken	String	Optional. Pagination token from a previous call's `response.nextToken`. Expires after 24 hours.	`AQICAHi...`
redriveFilter	Enum	Optional. Filter executions by whether they have been redriven.	`REDRIVEN` or `NOT_REDRIVEN`
selectors	List	Optional. JQ selectors to extract specific fields from the action output.	`[{"name": "executions", "expression": ".response.executions"}]`

The following table describes all output fields returned by this action.

Output	Type	Description
response	Object	List of executions from the AWS Step Functions API. `nextToken` is present only when more pages are available — pass it as `nextToken` on a subsequent call to retrieve the next page. `{ "executions": [ { "executionArn": "arn:aws:states:us-east-1:123456789012:execution:RestartUnhealthyService:incident-42", "stateMachineArn": "arn:aws:states:us-east-1:123456789012:stateMachine:RestartUnhealthyService", "name": "incident-42", "status": "RUNNING", "startDate": "2026-08-24T09:00:00.000Z" } ], "nextToken": null }`
success	Boolean	`true` on success, `false` on failure.
errorMessage	String	Error message if the request failed. `null` on success.

The following example lists the currently running executions for a state machine.

Workflow example
`name: find-running-sfn-executions description: 'Lists running executions for a state machine' workflowInputs: arnRole: type: String stateMachineArn: type: String steps: - name: findRunningExecutions type: action action: aws.stepFunctions.listExecutions version: '1' inputs: awsRoleArn: ${{ .workflowInputs.arnRole }} region: us-east-1 stateMachineArn: ${{ .workflowInputs.stateMachineArn }} statusFilter: RUNNING maxResults: 20 selectors: - name: executions expression: '.response.executions'`

Workflow example

name: find-running-sfn-executions
description: 'Lists running executions for a state machine'

workflowInputs:
  arnRole:
    type: String
  stateMachineArn:
    type: String

steps:
  - name: findRunningExecutions
    type: action
    action: aws.stepFunctions.listExecutions
    version: '1'
    inputs:
      awsRoleArn: ${{ .workflowInputs.arnRole }}
      region: us-east-1
      stateMachineArn: ${{ .workflowInputs.stateMachineArn }}
      statusFilter: RUNNING
      maxResults: 20
      selectors:
        - name: executions
          expression: '.response.executions'

Describe a state machine

The action identifier is aws.stepFunctions.describeStateMachine.

Returns the definition, IAM role, logging configuration, type (STANDARD or EXPRESS), and status of an AWS Step Functions state machine.

The following table describes all available input fields for this action.

Input	Type	Description	Example
awsRoleArn	String	Optional. IAM Role ARN to assume. Recommended. Takes precedence over key-based credentials when you supply both.	`arn:aws:iam::123456789012:role/my-workflow-role`
awsAccessKeyId	String (secret)	Optional. AWS access key ID. Must be passed as a secret.	`${{ :secrets:awsAccessKeyId }}`
awsSecretAccessKey	String (secret)	Optional. AWS secret access key. Must be passed as a secret.	`${{ :secrets:awsSecretAccessKey }}`
awsSessionToken	String (secret)	Optional. AWS session token for temporary credentials. Must be passed as a secret.	`${{ :secrets:awsSessionToken }}`
region	String	Required. AWS region where the state machine is deployed.	`us-east-1`
stateMachineArn	String	Required. ARN of the state machine to describe. Also accepts a version ARN.	`arn:aws:states:us-east-1:123456789012:stateMachine:RestartUnhealthyService`
includedData	Enum	Optional. Use `METADATA_ONLY` to skip returning the state machine definition and avoid needing `kms:Decrypt` when the definition is KMS-encrypted. Defaults to `ALL_DATA`.	`ALL_DATA` or `METADATA_ONLY`
selectors	List	Optional. JQ selectors to extract specific fields from the action output.	`[{"name": "type", "expression": ".response.type"}]`

The following table describes all output fields returned by this action.

Output	Type	Description
response	Object	State machine details from the AWS Step Functions API. The `type` field (`STANDARD` or `EXPRESS`) is useful for branching logic — for example, to determine whether `stopExecution` or `redriveExecution` are applicable. `{ "stateMachineArn": "arn:aws:states:us-east-1:123456789012:stateMachine:RestartUnhealthyService", "name": "RestartUnhealthyService", "status": "ACTIVE", "definition": "{\"StartAt\": \"RestartTask\", \"States\": {...}}", "roleArn": "arn:aws:iam::123456789012:role/StepFunctionsExecutionRole", "type": "STANDARD", "creationDate": "2026-01-15T00:00:00.000Z" }`
success	Boolean	`true` on success, `false` on failure.
errorMessage	String	Error message if the request failed. `null` on success.

The following example retrieves the type and definition of a state machine.

Workflow example
name: get-sfn-state-machine-type description: 'Retrieves the type and definition of a state machine' workflowInputs: arnRole: type: String stateMachineArn: type: String steps: - name: getDefinition type: action action: aws.stepFunctions.describeStateMachine version: '1' inputs: awsRoleArn: ${{ .workflowInputs.arnRole }} region: us-east-1 stateMachineArn: ${{ .workflowInputs.stateMachineArn }} selectors: - name: type expression: '.response.type' - name: definition expression: '.response.definition'

Workflow example

name: get-sfn-state-machine-type
description: 'Retrieves the type and definition of a state machine'

workflowInputs:
  arnRole:
    type: String
  stateMachineArn:
    type: String

steps:
  - name: getDefinition
    type: action
    action: aws.stepFunctions.describeStateMachine
    version: '1'
    inputs:
      awsRoleArn: ${{ .workflowInputs.arnRole }}
      region: us-east-1
      stateMachineArn: ${{ .workflowInputs.stateMachineArn }}
      selectors:
        - name: type
          expression: '.response.type'
        - name: definition
          expression: '.response.definition'

List state machines

The action identifier is aws.stepFunctions.listStateMachines.

Lists AWS Step Functions state machines in an account and region. Use pagination inputs to retrieve large result sets.

The following table describes all available input fields for this action.

Input	Type	Description	Example
awsRoleArn	String	Optional. IAM Role ARN to assume. Recommended. Takes precedence over key-based credentials when you supply both.	`arn:aws:iam::123456789012:role/my-workflow-role`
awsAccessKeyId	String (secret)	Optional. AWS access key ID. Must be passed as a secret.	`${{ :secrets:awsAccessKeyId }}`
awsSecretAccessKey	String (secret)	Optional. AWS secret access key. Must be passed as a secret.	`${{ :secrets:awsSecretAccessKey }}`
awsSessionToken	String (secret)	Optional. AWS session token for temporary credentials. Must be passed as a secret.	`${{ :secrets:awsSessionToken }}`
region	String	Required. AWS region to list state machines in.	`us-east-1`
maxResults	Int	Optional. Maximum number of state machines to return. Defaults to 100, maximum 1000.	`50`
nextToken	String	Optional. Pagination token from a previous call's `response.nextToken`. Expires after 24 hours.	`AQICAHi...`
selectors	List	Optional. JQ selectors to extract specific fields from the action output.	`[{"name": "stateMachines", "expression": ".response.stateMachines"}]`

The following table describes all output fields returned by this action.

Output	Type	Description
response	Object	List of state machines from the AWS Step Functions API. `nextToken` is present only when more pages are available — pass it as `nextToken` on a subsequent call to retrieve the next page. `{ "stateMachines": [ { "stateMachineArn": "arn:aws:states:us-east-1:123456789012:stateMachine:RestartUnhealthyService", "name": "RestartUnhealthyService", "type": "STANDARD", "creationDate": "2026-01-15T00:00:00.000Z" } ], "nextToken": null }`
success	Boolean	`true` on success, `false` on failure.
errorMessage	String	Error message if the request failed. `null` on success.

The following example lists state machines in the account and captures the result for downstream steps.

Workflow example
`name: discover-sfn-state-machines description: 'Lists state machines in the account' workflowInputs: arnRole: type: String steps: - name: discoverStateMachines type: action action: aws.stepFunctions.listStateMachines version: '1' inputs: awsRoleArn: ${{ .workflowInputs.arnRole }} region: us-east-1 maxResults: 50 selectors: - name: stateMachines expression: '.response.stateMachines'`

Workflow example

name: discover-sfn-state-machines
description: 'Lists state machines in the account'

workflowInputs:
  arnRole:
    type: String

steps:
  - name: discoverStateMachines
    type: action
    action: aws.stepFunctions.listStateMachines
    version: '1'
    inputs:
      awsRoleArn: ${{ .workflowInputs.arnRole }}
      region: us-east-1
      maxResults: 50
      selectors:
        - name: stateMachines
          expression: '.response.stateMachines'

What's next

To continue working with AWS actions and workflow automation, see the following resources.

AWS credentials setup: Configure IAM roles and access keys for use with AWS actions.
AWS Execute API: Call any AWS API directly when a dedicated action is not available.
Workflow examples: See real-world workflow examples using AWS actions.

Prerequisites.css-21sua1{background:none;border:none;width:0;padding:0;}

Required IAM permissions

Important

Start a Step Functions execution

Stop a Step Functions execution

Important

Redrive a Step Functions execution

Important

Describe a Step Functions execution

Important

List Step Functions executions

Describe a state machine

List state machines

What's next

Prerequisites