ProviderConfigA ProviderConfig configures the AWS provider.
TypeMR
Providerprovider-family-aws
Groupaws.upbound.io
Scopecluster
Versionv1beta1

1apiVersion: aws.upbound.io/v1beta1

2kind: ProviderConfig

kind
string
metadata
object
spec
object

A ProviderConfigSpec defines the desired state of a ProviderConfig.

array

AssumeRoleChain defines the options for assuming an IAM role

roleARN
string
tags
array

Tags is list of session tags that you want to pass. Each session tag consists of a key name and an associated value. For more information about session tags, see Tagging STS Sessions (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html).

key
required
string
value
required
string
array

TransitiveTagKeys is a list of keys for session tags that you want to set as transitive. If you set a tag key as transitive, the corresponding key and value passes to subsequent sessions in a role chain. For more information, see Chaining Roles with Session Tags (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_role-chaining).

credentials
required
object

Credentials required to authenticate to this provider.

env
object

Env is a reference to an environment variable that contains credentials that must be used to connect to the provider.

name
required
string
fs
object

Fs is a reference to a filesystem location that contains credentials that must be used to connect to the provider.

path
required
string
secretRef
object

A SecretRef is a reference to a secret key that contains the credentials that must be used to connect to the provider.

key
required
string
name
required
string
namespace
required
string
source
required
string
upbound
object

Upbound defines the options for authenticating using Upbound as an identity provider.

object

WebIdentity defines the options for assuming an IAM role with a Web Identity.

object

WebIdentity defines the options for assuming an IAM role with a Web Identity.

endpoint
object

Endpoint is where you can override the default endpoint configuration of AWS calls made by the provider.

array

Specifies the list of services you want endpoint to be used for

source
string
url
required
object

URL lets you configure the endpoint URL to be used in SDK calls.

dynamic
object

Dynamic lets you configure the behavior of endpoint URL resolver.

host
required
string
protocol
required
string
static
string
type
required
string
status
object

A ProviderConfigStatus reflects the observed state of a ProviderConfig.

array

Conditions of the resource.

lastTransitionTime
required
string
message
string
reason
required
string
status
required
string
type
required
string
users
integer
Discover the building blocks for your internal cloud platform.
© 2026 Upbound, Inc.
Solutions
Learn
Company
Community
More