Skip to content

Add web identity authentication documentation for AWS operators#191

Open
tobim wants to merge 2 commits intomainfrom
docs/aws-web-identity-support
Open

Add web identity authentication documentation for AWS operators#191
tobim wants to merge 2 commits intomainfrom
docs/aws-web-identity-support

Conversation

@tobim
Copy link
Copy Markdown
Member

@tobim tobim commented Feb 5, 2026

Summary

  • Document the new web_identity option in the aws_iam configuration for AWS operators
  • Add overview section to Amazon integrations page explaining OIDC-based cross-cloud authentication
  • Add detailed reference documentation for web_identity configuration fields

Changes

Reference documentation (src/partials/operators/AWSIAMOptions.mdx):

  • Add web_identity field to the aws_iam record structure
  • Document all web_identity sub-fields: token_file, token_endpoint, token, headers, token_path
  • Explain mutual exclusivity and validation constraints
  • Note automatic credential refresh behavior

Integrations (src/content/docs/integrations/amazon/index.mdx):

  • Add "Web identity authentication" section with overview and example
  • Explain the three token source options
  • Link to the reference documentation for details

Related PRs


Generated with Claude Code

Document the new `web_identity` option for OIDC-based authentication
using the AWS AssumeRoleWithWebIdentity API. This enables cross-cloud
authentication with tokens from Azure, Google Cloud, or custom OIDC
identity providers.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@github-actions github-actions bot added integration Integration documentation site Site infrastructure labels Feb 5, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Feb 5, 2026

📦 Preview  ·  View →  ·  🟢 Live

Auto-updates on push

Copy link
Copy Markdown
Member

@lava lava left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good overall

Reflect API change where token_endpoint is now a record with
url, headers, and path fields instead of a flat structure.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@tobim tobim force-pushed the docs/aws-web-identity-support branch from 839b275 to 136ca74 Compare February 6, 2026 07:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

integration Integration documentation site Site infrastructure

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants