Synopsis
Registers a role in your AWS account for the plane to build clusters with. The plane mints an external ID and prints it here. It is shown ONCE: reads never return it, so that no tenant can discover a value another tenant’s role already trusts. Losing it means creating the account again under a different name. Registering is only half the handshake. Until the external ID is in the role’s trust policy, the plane cannot assume the role and verification fails — which is the expected state between these two steps, not a fault.Options
Global options
See global options.SEE ALSO
- kubox admin cloud-account - Work with the cloud accounts a management plane may build into