outbound_web_identity_federation_infos

Creates, updates, deletes, gets or lists an outbound_web_identity_federation_infos resource.

Overview

Name	outbound_web_identity_federation_infos
Type	Resource
Id	aws.iam.outbound_web_identity_federation_infos

Fields

The following fields are returned by SELECT queries:

get_outbound_web_identity_federation_info

Name	Datatype	Description
issuer_identifier	string	A unique issuer URL for your Amazon Web Services account that hosts the OpenID Connect (OIDC) discovery endpoints at /.well-known/openid-configuration and /.well-known/jwks.json. The OpenID Connect (OIDC) discovery endpoints contain verification keys and metadata necessary for token verification.
jwt_vending_enabled	boolean	Indicates whether outbound identity federation is currently enabled for your Amazon Web Services account. When true, IAM principals in the account can call the GetWebIdentityToken API to obtain JSON Web Tokens (JWTs) for authentication with external services.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_outbound_web_identity_federation_info	select	region		Retrieves the configuration information for the outbound identity federation feature in your Amazon Web Services account. The response includes the unique issuer URL for your Amazon Web Services account and the current enabled/disabled status of the feature. Use this operation to obtain the issuer URL that you need to configure trust relationships with external services.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

get_outbound_web_identity_federation_info

Retrieves the configuration information for the outbound identity federation feature in your Amazon Web Services account. The response includes the unique issuer URL for your Amazon Web Services account and the current enabled/disabled status of the feature. Use this operation to obtain the issuer URL that you need to configure trust relationships with external services.

SELECT
issuer_identifier,
jwt_vending_enabled
FROM aws.iam.outbound_web_identity_federation_infos
WHERE region = '{{ region }}' -- required
;