POST
/
api
/
v1
/
auth
/
aws-auth
/
identities
/
{identityId}

Authorizations

Authorization
string
headerrequired

An access token in Infisical

Path Parameters

identityId
string
required

The ID of the identity to attach the configuration onto.

Body

application/json
stsEndpoint
string
default: https://sts.amazonaws.com/

The endpoint URL for the AWS STS API.

Minimum length: 1
allowedPrincipalArns
string
default:

The comma-separated list of trusted IAM principal ARNs that are allowed to authenticate with Infisical.

allowedAccountIds
string
default:

The comma-separated list of trusted AWS account IDs that are allowed to authenticate with Infisical.

accessTokenTrustedIps
object[]

The IPs or CIDR ranges that access tokens can be used from.

accessTokenTTL
integer
default: 2592000

The lifetime for an access token in seconds.

Required range: 1 < x < 315360000
accessTokenMaxTTL
integer
default: 2592000

The maximum lifetime for an access token in seconds.

Required range: x < 315360000
accessTokenNumUsesLimit
integer
default: 0

The maximum number of times that an access token can be used.

Required range: x > 0

Response

200 - application/json
identityAwsAuth
object
required

Was this page helpful?