:_mod-docs-content-type: ASSEMBLY
[id="bound-service-account-tokens"]
= Using bound service account tokens
include::_attributes/common-attributes.adoc[]
:context: bound-service-account-tokens

toc::[]

[role="_abstract"]
You can use bound service account tokens, which improve the ability to integrate with cloud provider identity access management (IAM) services such as {product-title} on {aws-short} IAM or {gcp-full} IAM.

// About bound service account tokens
include::modules/bound-sa-tokens-about.adoc[leveloffset=+1]

// Configuring bound service account tokens using volume projection
include::modules/bound-sa-tokens-configuring.adoc[leveloffset=+1]

// Creating bound service account tokens outside the pod
include::modules/bound-sa-tokens-configuring-externally.adoc[leveloffset=+1]

[role="_additional-resources"]
[id="additional-resources_{context}"]
== Additional resources

// This xref target does not exist in the OSD/ROSA docs.
ifndef::openshift-dedicated,openshift-rosa,openshift-rosa-hcp[]
* xref:../nodes/nodes/nodes-nodes-rebooting.adoc#nodes-nodes-rebooting-gracefully_nodes-nodes-rebooting[Rebooting a node gracefully]
endif::openshift-dedicated,openshift-rosa,openshift-rosa-hcp[]

* xref:../authentication/understanding-and-creating-service-accounts.adoc#service-accounts-managing_understanding-service-accounts[Creating service accounts]

// TODO: Verify distros: openshift-enterprise,openshift-webscale,openshift-origin
