Skip to content

Commit b54ccd3

Browse files
authored
docsp-27037 - AWS EKS Auth (#346)
* add auth * db feedback
1 parent 42e5182 commit b54ccd3

File tree

1 file changed

+18
-0
lines changed

1 file changed

+18
-0
lines changed

source/fundamentals/auth.txt

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -390,6 +390,7 @@ The next examples show how to provide your credentials by setting environment
390390
variables for the following types of authentication:
391391

392392
- Programmatic access keys
393+
- Web identity provider
393394
- ECS container credentials
394395
- EC2 container credentials
395396

@@ -405,6 +406,23 @@ in environment variables by using ``bash`` or a similar shell:
405406
Omit the line containing ``AWS_SESSION_TOKEN`` if you don't need an AWS
406407
session token for that role.
407408

409+
You can use an OpenID Connect (OIDC)-compatible **web identity provider** to authenticate
410+
to Amazon Elastic Kubernetes Service (EKS) or other services.
411+
412+
.. important::
413+
414+
Your project must include v1 or v2 of the AWS SDK as a dependency to authenticate
415+
using a web identity provider.
416+
417+
To use a web identity provider, create a file that contains your
418+
OIDC token. Next, use ``bash`` or a similar shell to set an environment variable
419+
to the absolute path to this file, as shown in the following example:
420+
421+
.. code-block:: bash
422+
423+
export AWS_WEB_IDENTITY_TOKEN_FILE=<absolute path to file containing your OIDC token>
424+
425+
408426
To authenticate by using **ECS container credentials**, set the ECS
409427
endpoint relative URI in an environment variable by using ``bash`` or
410428
a similar shell as shown in the following example:

0 commit comments

Comments
 (0)