oidc_providers
Used to retrieve a list of oidc_providers
in a region or to create or delete a oidc_providers
resource, use oidc_provider
to read or update an individual resource.
Overview
Name | oidc_providers |
Type | Resource |
Description | Resource Type definition for AWS::IAM::OIDCProvider |
Id | aws.iam.oidc_providers |
Fields
Name | Datatype | Description |
---|---|---|
arn | string | Amazon Resource Name (ARN) of the OIDC provider |
region | string | AWS region. |
Methods
Name | Accessible by | Required Params |
---|---|---|
create_resource | INSERT | ThumbprintList, region |
delete_resource | DELETE | data__Identifier, region |
list_resource | SELECT | region |
SELECT
Example
SELECT
region,
arn
FROM aws.iam.oidc_providers
;
INSERT
Example
Use the following StackQL query and manifest file to create a new oidc_provider
resource, using stack-deploy
.
- Required Properties
- All Properties
- Manifest
/*+ create */
INSERT INTO aws.iam.oidc_providers (
ThumbprintList,
region
)
SELECT
'{{ ThumbprintList }}',
'{{ region }}';
/*+ create */
INSERT INTO aws.iam.oidc_providers (
ClientIdList,
Url,
ThumbprintList,
Tags,
region
)
SELECT
'{{ ClientIdList }}',
'{{ Url }}',
'{{ ThumbprintList }}',
'{{ Tags }}',
'{{ region }}';
version: 1
name: stack name
description: stack description
providers:
- aws
globals:
- name: region
value: '{{ vars.AWS_REGION }}'
resources:
- name: oidc_provider
props:
- name: ClientIdList
value:
- '{{ ClientIdList[0] }}'
- name: Url
value: '{{ Url }}'
- name: ThumbprintList
value:
- '{{ ThumbprintList[0] }}'
- name: Tags
value:
- Value: '{{ Value }}'
Key: '{{ Key }}'
DELETE
Example
/*+ delete */
DELETE FROM aws.iam.oidc_providers
WHERE data__Identifier = '<Arn>'
AND region = 'us-east-1';
Permissions
To operate on the oidc_providers
resource, the following permissions are required:
Create
iam:CreateOpenIDConnectProvider,
iam:TagOpenIDConnectProvider,
iam:GetOpenIDConnectProvider
Delete
iam:DeleteOpenIDConnectProvider
List
iam:ListOpenIDConnectProvider,
iam:GetOpenIDConnectProvider