AWS IAM documentation change
Summary
Added PowerShell V5 example for creating an OIDC provider with thumbprint validation
Security assessment
Documents secure configuration of identity providers but doesn't fix any existing security issue
Diff
diff --git a/IAM/latest/UserGuide/iam_example_iam_CreateOpenIdConnectProvider_section.md b/IAM/latest/UserGuide/iam_example_iam_CreateOpenIdConnectProvider_section.md index 57d3a6ea4..fd4ba793f 100644 --- a//IAM/latest/UserGuide/iam_example_iam_CreateOpenIdConnectProvider_section.md +++ b//IAM/latest/UserGuide/iam_example_iam_CreateOpenIdConnectProvider_section.md @@ -83,0 +84,19 @@ PowerShell +**Tools for PowerShell V5** + + +**Example 1: This example creates an IAM OIDC provider associated with the OIDC compatible provider service found at the URL`https://example.oidcprovider.com` and the client ID `my-testapp-1`. The OIDC provider supplies the thumbprint. To authenticate the thumbprint, follow the steps at http://docs.aws.amazon.com/IAM/latest/UserGuide/identity-providers-oidc-obtain-thumbprint.html.** + + + New-IAMOpenIDConnectProvider -Url https://example.oidcprovider.com -ClientIDList my-testapp-1 -ThumbprintList 990F419EXAMPLEECF12DDEDA5EXAMPLE52F20D9E + + +**Output:** + + + arn:aws:iam::123456789012:oidc-provider/example.oidcprovider.com + + * For API details, see [CreateOpenIdConnectProvider](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. + + + +