// Module included in the following assemblies:
//
// * rosa_install_access_delete_clusters/rosa_getting_started_iam/rosa-aws-prereqs.adoc
// * rosa_planning/rosa-sts-aws-prereqs.adoc
:_mod-docs-content-type: REFERENCE
[id="rosa-sts-policy-iam_{context}"]
= Red{nbsp}Hat managed IAM references for AWS

[role="_abstract"]
ifndef::openshift-rosa-hcp[]
When you use Security Token Service (STS) as your cluster credential method,
endif::openshift-rosa-hcp[]
Red{nbsp}Hat is not responsible for creating and managing Amazon Web Services (AWS) identity and access management (IAM) policies, IAM users, or IAM roles. For information on creating these roles and policies, see the following sections on IAM roles.

* To use the `ocm` CLI, you must have an `ocm-role` and `user-role` resource.