OpenIDConnectProvider

Source: src/AWS/IAM/OpenIDConnectProvider.ts

An IAM OpenID Connect provider for web identity federation.

OpenIDConnectProvider registers an external OIDC issuer so IAM roles can be assumed through web identity federation flows such as GitHub Actions.

Federating with OIDC

const oidc = yield* OpenIDConnectProvider("GithubOidc", {
  url: "https://token.actions.githubusercontent.com",
  clientIDList: ["sts.amazonaws.com"],
  thumbprintList: ["6938fd4d98bab03faadb97b34396831e3780aea1"],
});