ProviderConfig
A ProviderConfig configures the AWS provider.
TypeMR
Providerprovider-family-aws
Groupaws.upbound.io
Scopecluster
Versionv1beta1

1apiVersion: aws.upbound.io/v1beta1

2kind: ProviderConfig

apiVersion
string
kind
string
metadata
object
spec
object

A ProviderConfigSpec defines the desired state of a ProviderConfig.

assumeRoleChain
array

AssumeRoleChain defines the options for assuming an IAM role

externalID
string
roleARN
string
tags
array

Tags is list of session tags that you want to pass. Each session tag consists of a key name and an associated value. For more information about session tags, see Tagging STS Sessions (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html).

key
required
string
value
required
string
transitiveTagKeys
array

TransitiveTagKeys is a list of keys for session tags that you want to set as transitive. If you set a tag key as transitive, the corresponding key and value passes to subsequent sessions in a role chain. For more information, see Chaining Roles with Session Tags (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html#id_session-tags_role-chaining).

credentials
required
object

Credentials required to authenticate to this provider.

env
object

Env is a reference to an environment variable that contains credentials that must be used to connect to the provider.

name
required
string
fs
object

Fs is a reference to a filesystem location that contains credentials that must be used to connect to the provider.

path
required
string
secretRef
object

A SecretRef is a reference to a secret key that contains the credentials that must be used to connect to the provider.

key
required
string
name
required
string
namespace
required
string
source
required
string
upbound
object

Upbound defines the options for authenticating using Upbound as an identity provider.

webIdentity
object

WebIdentity defines the options for assuming an IAM role with a Web Identity.

roleARN
string
roleSessionName
string
tokenConfig
object

TokenConfig is the Web Identity Token config to assume the role.

fs
object

Fs is a reference to a filesystem location that contains credentials that must be used to obtain the web identity token.

path
required
string
secretRef
object

A SecretRef is a reference to a secret key that contains the credentials that must be used to obtain the web identity token.

key
required
string
name
required
string
namespace
required
string
source
required
string
webIdentity
object

WebIdentity defines the options for assuming an IAM role with a Web Identity.

roleARN
string
roleSessionName
string
tokenConfig
object

TokenConfig is the Web Identity Token config to assume the role.

fs
object

Fs is a reference to a filesystem location that contains credentials that must be used to obtain the web identity token.

path
required
string
secretRef
object

A SecretRef is a reference to a secret key that contains the credentials that must be used to obtain the web identity token.

key
required
string
name
required
string
namespace
required
string
source
required
string
endpoint
object

Endpoint is where you can override the default endpoint configuration of AWS calls made by the provider.

hostnameImmutable
boolean
partitionId
string
services
array

Specifies the list of services you want endpoint to be used for

signingMethod
string
signingName
string
signingRegion
string
source
string
url
required
object

URL lets you configure the endpoint URL to be used in SDK calls.

dynamic
object

Dynamic lets you configure the behavior of endpoint URL resolver.

host
required
string
protocol
required
string
static
string
type
required
string
s3_use_path_style
boolean
skip_credentials_validation
boolean
skip_metadata_api_check
boolean
skip_region_validation
boolean
skip_requesting_account_id
boolean
status
object

A ProviderConfigStatus reflects the observed state of a ProviderConfig.

conditions
array

Conditions of the resource.

lastTransitionTime
required
string
message
string
observedGeneration
integer
reason
required
string
status
required
string
type
required
string
users
integer
Discover the building blocks for your internal cloud platform.
© 2026 Upbound, Inc.
Solutions
Learn
Company
Community
More