Skip to content

Commit e5ca885

Browse files
mtodorkcarmichael08
andcommitted
Add note about cloud services for shot-lived access
Co-authored-by: Kerry Carmichael <kcarmich@redhat.com>
1 parent 91ad185 commit e5ca885

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

snippets/note-about-creating-tokens.adoc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,4 +10,5 @@
1010
* To prevent privilege escalation, when you create a new token, your role's permissions limit the permission you can assign to that token. For example, if you only have `read` permission for the Integration resource, you cannot create a token with `write` permission.
1111
* If you want a custom role to create tokens for other users to use, you must assign the required permissions to that custom role.
1212
* Use short-lived tokens for machine-to-machine communication, such as CI/CD pipelines, scripts, and other automation. Also, use the `roxctl central login` command for human-to-machine communication, such as `roxctl` CLI or API access.
13+
* The majority of cloud service providers support OIDC identity tokens, for example, Microsoft Entra ID, Google Cloud Identity Platform, and AWS Cognito. OIDC identity tokens issued by these services can be used for {product-title-short} short-lived access.
1314
====

0 commit comments

Comments
 (0)