File tree Expand file tree Collapse file tree 1 file changed +18
-0
lines changed Expand file tree Collapse file tree 1 file changed +18
-0
lines changed Original file line number Diff line number Diff line change @@ -390,6 +390,7 @@ The next examples show how to provide your credentials by setting environment
390390variables for the following types of authentication:
391391
392392- Programmatic access keys
393+ - Web identity provider
393394- ECS container credentials
394395- EC2 container credentials
395396
@@ -405,6 +406,23 @@ in environment variables by using ``bash`` or a similar shell:
405406Omit the line containing ``AWS_SESSION_TOKEN`` if you don't need an AWS
406407session token for that role.
407408
409+ You can use an OpenID Connect (OIDC)-compatible **web identity provider** to authenticate
410+ to Amazon Elastic Kubernetes Service (EKS) or other services.
411+
412+ .. important::
413+
414+ Your project must include v1 or v2 of the AWS SDK as a dependency to authenticate
415+ using a web identity provider.
416+
417+ To use a web identity provider, create a file that contains your
418+ OIDC token. Next, use ``bash`` or a similar shell to set an environment variable
419+ to the absolute path to this file, as shown in the following example:
420+
421+ .. code-block:: bash
422+
423+ export AWS_WEB_IDENTITY_TOKEN_FILE=<absolute path to file containing your OIDC token>
424+
425+
408426To authenticate by using **ECS container credentials**, set the ECS
409427endpoint relative URI in an environment variable by using ``bash`` or
410428a similar shell as shown in the following example:
You can’t perform that action at this time.
0 commit comments