Skip to main content
Register a role the management plane may assume

Synopsis

Registers a role in your AWS account for the plane to build clusters with. The plane mints an external ID and prints it here. It is shown ONCE: reads never return it, so that no tenant can discover a value another tenant’s role already trusts. Losing it means creating the account again under a different name. Registering is only half the handshake. Until the external ID is in the role’s trust policy, the plane cannot assume the role and verification fails — which is the expected state between these two steps, not a fault.

Options

Global options

See global options.

SEE ALSO