awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-06 07:26:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

Doc tweaks

Browse Source
This commit is contained in:
x032205
2025-07-24 11:44:10 -04:00
parent 60620840f2
commit 3483f185a8
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/documentation/platform/access-controls/abac/managing-machine-identity-attributes.mdx
+7 -5
View File
@@ -74,16 +74,18 @@ For methods like OIDC, these come as claims in the token and can be made availab
<img src="/images/platform/access-controls/abac-policy-k8s-format.png" /> <img src="/images/platform/access-controls/abac-policy-k8s-format.png" />
</Tab> </Tab>
<Tab title="AWS Attributes"> <Tab title="AWS Attributes">
For identities authenticated using AWS Auth, several attributes can be accessed: For identities authenticated using AWS Auth, several attributes can be accessed. On top of the 3 base attributes, there's 4 derived from the ARN. The example below includes comments showing how each derived attribute looks like based on this ARN: `arn:aws:iam::123456789012:user/example-user`
``` ```
{{ identity.auth.aws.accountId }} {{ identity.auth.aws.accountId }}
{{ identity.auth.aws.arn }} {{ identity.auth.aws.arn }}
{{ identity.auth.aws.userId }} {{ identity.auth.aws.userId }}
{{ identity.auth.aws.partition }}
{{ identity.auth.aws.service }} // Derived from ARN
{{ identity.auth.aws.resourceType }} {{ identity.auth.aws.partition }} // aws
{{ identity.auth.aws.resourceName }} {{ identity.auth.aws.service }} // iam
{{ identity.auth.aws.resourceType }} // user
{{ identity.auth.aws.resourceName }} // example-user
``` ```
<img src="/images/platform/access-controls/abac-policy-aws-format.png" /> <img src="/images/platform/access-controls/abac-policy-aws-format.png" />