:_mod-docs-content-type: ASSEMBLY
[id="cloud-experts-rosa-hcp-sts-explained"]
= AWS STS and {product-title} explained

include::_attributes/common-attributes.adoc[]
include::_attributes/attributes-openshift-dedicated.adoc[]
:context: cloud-experts-rosa-hcp-sts-explained

toc::[]

//rosaworkshop.io content metadata
//Brought into ROSA product docs 2023-10-26
//Modified for HCP 2024-4-16

[role="_abstract"]
{product-title} uses the Amazon Web Services (AWS) Security Token Service (STS) for AWS Identity and Access Management (IAM) to obtain the necessary credentials to interact with resources in your AWS account.

include::modules/rosa-hcp-sts-credential-method.adoc[leveloffset=+1]

//See [insert new xref when we have one for HCP] for more information about the different `--mode` options.

include::modules/rosa-hcp-sts-security.adoc[leveloffset=+1]

include::modules/rosa-hcp-sts-components.adoc[leveloffset=+1]

include::modules/rosa-hcp-sts-deploying-cluster.adoc[leveloffset=+1]

include::modules/rosa-hcp-sts-workflow.adoc[leveloffset=+1]

[role="_additional-resources"]
== Additional resources
* link:https://docs.aws.amazon.com/STS/latest/APIReference/welcome.html[AWS STS documentation]
* xref:../rosa_architecture/rosa_policy_service_definition/rosa-hcp-service-definition.adoc#rosa-sdpolicy-instance-types_rosa-hcp-service-definition[AWS compute types]
* xref:../rosa_planning/rosa-sts-aws-prereqs.adoc#rosa-ec2-instances_rosa-sts-aws-prereqs[Provisioned AWS infrastructure]
* link:https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ROSAInstallerPolicy.html[`ROSAInstallerPolicy`]
* link:https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ROSAWorkerInstancePolicy.html[`ROSAWorkerInstancePolicy`]
* link:https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ROSASRESupportPolicy.html[`ROSASRESupportPolicy`]
* link:https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ROSAIngressOperatorPolicy.html[`ROSAIngressOperatorPolicy`]
* link:https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ROSAAmazonEBSCSIDriverOperatorPolicy.html[`ROSAAmazonEBSCSIDriverOperatorPolicy`]
* link:https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ROSACloudNetworkConfigOperatorPolicy.html[`ROSACloudNetworkConfigOperatorPolicy`]
* link:https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ROSAControlPlaneOperatorPolicy.html[`ROSAControlPlaneOperatorPolicy`]
* link:https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ROSAImageRegistryOperatorPolicy.html[`ROSAImageRegistryOperatorPolicy`]
* link:https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ROSAKMSProviderPolicy.html[`ROSAKMSProviderPolicy`]
* link:https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ROSAKubeControllerPolicy.html[`ROSAKubeControllerPolicy`]
* link:https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ROSAManageSubscription.html[`ROSAManageSubscription`]
* link:https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ROSANodePoolManagementPolicy.html[`ROSANodePoolManagementPolicy`]
* xref:../rosa_hcp/rosa-hcp-sts-creating-a-cluster-quickly.adoc#rosa-sts-creating-cluster-using-customizations_rosa-sts-creating-a-cluster-with-customizations[Creating a cluster with customizations]
* xref:../rosa_architecture/rosa-sts-about-iam-resources.adoc#rosa-hcp-about-iam-resources[About IAM resources]
* xref:../rosa_planning/rosa-hcp-prepare-iam-roles-resources.adoc#rosa-hcp-prepare-iam-roles-resources[Required IAM roles and resources]