Record · corpus.blog/posts/01a08783-2996-72ba-a876-ac53ddd9a04e

AWS IAM Outbound Identity Federation - Issuing Short-Lived Tokens from AWS to External Services | hidekazu-konishi.com

hidekazu-konishi.com · published 12 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hidekazu-konishi.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 53
Words captured: 11,765

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_outbound.html

docs.aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2025/11/aws-iam-identity-federation-external-services-jwts/

aws.amazon.com

IAM Policy Evaluation Logic Step-by-Step - Explicit Deny, RCP, SCP, Resource Policy, Identity Policy, Permission Boundary, and Session Policy | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS IAM Identity Center Complete Setup Guide - Multi-Account SSO Design Patterns from Organization Structure to ABAC | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS IAM Inbound Workload Federation - IAM Roles Anywhere, OIDC, and SPIFFE Converging on One Trust Policy Condition | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Amazon EKS Pod Identity and IRSA Decision Guide - Workload Identity Design, Trade-offs, and Migration Paths | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Amazon Cognito Federation Complete Implementation Guide - Google, Apple, Microsoft, OIDC, and SAML | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Secrets Manager and Parameter Store Decision Guide - Storing, Rotating, and Accessing Secrets and Configuration | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Organization Guardrails - Service Control Policies, Resource Control Policies, and Data Perimeter Design | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html

docs.aws.amazon.com

https://aws.amazon.com/blogs/aws/simplify-access-to-external-services-using-aws-iam-outbound-identity-federation/

aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_outbound_getting_started.html

docs.aws.amazon.com

The Boundaries of the AWS Global Network - Autonomous Systems, Partitions, and What a Private Path Does Not Guarantee | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

https://docs.aws.amazon.com/IAM/latest/APIReference/API_EnableOutboundWebIdentityFederation.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetOutboundWebIdentityFederationInfo.html

docs.aws.amazon.com

https://docs.aws.amazon.com/systems-manager/latest/userguide/cloud-connector-prereqs-aws.html

docs.aws.amazon.com

https://docs.aws.amazon.com/STS/latest/APIReference/API_GetWebIdentityToken.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_outbound_token_claims.html

docs.aws.amazon.com

https://docs.aws.amazon.com/systems-manager/latest/userguide/cloud-connector-prereqs-azure.html

docs.aws.amazon.com

https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-azure-setup-azure.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_outbound_policies.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-single-vs-multi-valued-context-keys.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sts_vpc_endpoint_policies.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html

docs.aws.amazon.com

AWS Tagging Strategy: Complete Guide for Operations, Automation, and Security | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_region-endpoints.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/cloudtrail-integration.html

docs.aws.amazon.com

Centralized Logging and Audit Architecture on AWS - Multi-Account Log Aggregation, Detection, and Query with CloudTrail, Config, Security Hub, and OpenSearch | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS IAM Access Analyzer Deep Dive - External, Internal, and Unused Access Analyzers with Custom Policy Checks in CI | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

https://docs.aws.amazon.com/IAM/latest/APIReference/API_DisableOutboundWebIdentityFederation.html

docs.aws.amazon.com

IAM Anti-Patterns - Real-World Mistakes and Their Root Causes | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sts_vpc_endpoint_create.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction_attribute-based-access-control.html

docs.aws.amazon.com

https://docs.aws.amazon.com/cli/latest/reference/sts/get-web-identity-token.html

docs.aws.amazon.com

https://docs.aws.amazon.com/cli/latest/reference/iam/get-outbound-web-identity-federation-info.html

docs.aws.amazon.com

https://docs.aws.amazon.com/systems-manager/latest/userguide/cloud-connector-azure-federation-role.html

docs.aws.amazon.com

https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-azure-prereqs.html

docs.aws.amazon.com

https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_rcps.html

docs.aws.amazon.com

https://docs.aws.amazon.com/wellarchitected/latest/framework/sec_identities_unique.html

docs.aws.amazon.com

https://aws.amazon.com/identity/federation/outbound-federation/

aws.amazon.com

https://datatracker.ietf.org/doc/html/rfc7519

datatracker.ietf.org

https://datatracker.ietf.org/doc/html/rfc7517

datatracker.ietf.org

https://openid.net/specs/openid-connect-discovery-1_0.html

openid.net

AWS IAM Glossary - Principal, Permission Boundary, SCP, RCP, ABAC, and Cedar Explained | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Multi-Account Operational Patterns - Control Tower, Organizations, SCPs | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Zero-Trust Network Architecture Guide - Segmentation, Inspection, and Identity-Aware Access with VPC, Network Firewall, VPC Lattice, and Verified Access | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS History and Timeline regarding AWS Identity and Access Management - Overview, Functions, Features, Summary of Updates, and Introduction to IAM | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

JWT Decoder Tool - JSON Web Token Inspector and Debugger | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

IAM Policy Least Privilege Analyzer - Detect Overly Permissive IAM Policies Offline | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

IAM Policy Simulator (Offline) - Client-Side IAM Decision Diamond Evaluator | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com