The App Store Connect API now supports provisioning, including management of bundle IDs, capabilities, signing certificates, devices, and provisioning profiles. Previously issued App Store Connect API keys can now be used to access the provisioning APIs. Audit or revoke any existing keys that you do not want to have access to this functionality.Learn more
Source