ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: usr / local / jetapps / var / lib / aws / lib / python2.7 / site-packages / awscli / examples / iam

**To create an OpenID Connect (OIDC) provider**

To create an OpenID Connect (OIDC) provider, we recommend using the ``--cli-input-json`` parameter to pass a JSON file that contains the required parameters. When you create an OIDC provider, you must pass the URL of the provider, and the URL must begin with ``https://``. It can be difficult to pass the URL as a command line parameter, because the colon (:) and forward slash (/) characters have special meaning in some command line environments. Using the ``--cli-input-json`` parameter gets around this limitation.

To use the ``--cli-input-json`` parameter, start by using the ``create-open-id-connect-provider`` command with the ``--generate-cli-skeleton`` parameter, as in the following example::

aws iam create-open-id-connect-provider --generate-cli-skeleton > create-open-id-connect-provider.json

The previous command creates a JSON file called create-open-id-connect-provider.json that you can use to fill in the information for a subsequent ``create-open-id-connect-provider`` command. For example::

{
      "Url": "https://server.example.com",
      "ClientIDList": [
          "example-application-ID"
      ],
      "ThumbprintList": [
          "c3768084dfb3d2b68b7897bf5f565da8eEXAMPLE"
      ]
  }

Next, to create the OpenID Connect (OIDC) provider, use the ``create-open-id-connect-provider`` command again, this time passing the ``--cli-input-json`` parameter to specify your JSON file. The following ``create-open-id-connect-provider`` command uses the ``--cli-input-json`` parameter with a JSON file called create-open-id-connect-provider.json::

aws iam create-open-id-connect-provider --cli-input-json file://create-open-id-connect-provider.json

Output::

{
      "OpenIDConnectProviderArn": "arn:aws:iam::123456789012:oidc-provider/server.example.com"
  }

For more information about OIDC providers, see `Using OpenID Connect Identity Providers`_ in the *Using IAM* guide.

For more information about obtaining thumbprints for an OIDC provider, see `Obtaining the Thumbprint for an OpenID Connect Provider`_ in the *Using IAM* guide.

.. _`Using OpenID Connect Identity Providers`: http://docs.aws.amazon.com/IAM/latest/UserGuide/identity-providers-oidc.html

.. _`Obtaining the Thumbprint for an OpenID Connect Provider`: http://docs.aws.amazon.com/IAM/latest/UserGuide/identity-providers-oidc-obtain-thumbprint.html

[+] ..
[-] delete-login-profile.rst [edit]
[-] create-virtual-mfa-device.rst [edit]
[-] get-user-policy.rst [edit]
[-] create-policy.rst [edit]
[-] enable-mfa-device.rst [edit]
[-] get-role-policy.rst [edit]
[-] delete-group.rst [edit]
[-] detach-user-policy.rst [edit]
[-] update-role.rst [edit]
[-] delete-account-alias.rst [edit]
[-] attach-role-policy.rst [edit]
[-] list-policy-versions.rst [edit]
[-] upload-ssh-public-key.rst [edit]
[-] get-account-authorization-details.rst [edit]
[-] create-policy-version.rst [edit]
[-] delete-saml-provider.rst [edit]
[-] resync-mfa-device.rst [edit]
[-] get-service-linked-role-deletion-status.rst [edit]
[-] list-user-policies.rst [edit]
[-] delete-policy.rst [edit]
[-] create-saml-provider.rst [edit]
[-] attach-group-policy.rst [edit]
[-] get-context-keys-for-custom-policy.rst [edit]
[-] list-access-keys.rst [edit]
[-] delete-ssh-public-key.rst [edit]
[-] create-user.rst [edit]
[-] set-default-policy-version.rst [edit]
[-] delete-instance-profile.rst [edit]
[-] list-ssh-public-keys.rst [edit]
[-] update-user.rst [edit]
[-] list-attached-group-policies.rst [edit]
[-] get-server-certificate.rst [edit]
[-] change-password.rst [edit]
[-] get-group.rst [edit]
[-] list-policies-granting-service-access.rst [edit]
[-] list-virtual-mfa-devices.rst [edit]
[-] simulate-custom-policy.rst [edit]
[-] tag-role.rst [edit]
[-] untag-user.rst [edit]
[-] get-policy-version.rst [edit]
[-] untag-role.rst [edit]
[-] update-saml-provider.rst [edit]
[-] put-group-policy.rst [edit]
[-] create-service-linked-role.rst [edit]
[-] create-role.rst [edit]
[-] get-context-keys-for-principal-policy.rst [edit]
[-] update-group.rst [edit]
[-] create-open-id-connect-provider.rst [edit]
[-] create-group.rst [edit]
[-] delete-virtual-mfa-device.rst [edit]
[+] wait
[-] list-roles.rst [edit]
[-] delete-role-policy.rst [edit]
[-] list-signing-certificates.rst [edit]
[-] delete-service-linked-role.rst [edit]
[-] list-users.rst [edit]
[-] reset-service-specific-credential.rst [edit]
[-] list-group-policies.rst [edit]
[-] update-server-certificate.rst [edit]
[-] simulate-principal-policy.rst [edit]
[-] list-account-aliases.rst [edit]
[-] list-entities-for-policy.rst [edit]
[-] detach-role-policy.rst [edit]
[-] attach-user-policy.rst [edit]
[-] delete-account-password-policy.rst [edit]
[-] delete-user-policy.rst [edit]
[-] get-access-key-last-used.rst [edit]
[-] put-user-policy.rst [edit]
[-] get-credential-report.rst [edit]
[-] delete-role.rst [edit]
[-] get-instance-profile.rst [edit]
[-] get-account-password-policy.rst [edit]
[-] delete-access-key.rst [edit]
[-] add-role-to-instance-profile.rst [edit]
[-] add-client-id-to-open-id-connect-provider.rst [edit]
[-] delete-open-id-connect-provider.rst [edit]
[-] list-instance-profiles.rst [edit]
[-] delete-policy-version.rst [edit]
[-] list-role-tags.rst [edit]
[-] delete-user.rst [edit]
[-] list-role-policies.rst [edit]
[-] put-role-policy.rst [edit]
[-] create-account-alias.rst [edit]
[-] update-signing-certificate.rst [edit]
[-] remove-client-id-from-open-id-connect-provider.rst [edit]
[-] get-saml-provider.rst [edit]
[-] update-account-password-policy.rst [edit]
[-] update-ssh-public-key.rst [edit]
[-] create-login-profile.rst [edit]
[-] get-role.rst [edit]
[-] generate-credential-report.rst [edit]
[-] detach-group-policy.rst [edit]
[-] delete-service-specific-credential.rst [edit]
[-] get-login-profile.rst [edit]
[-] delete-server-certificate.rst [edit]
[-] upload-server-certificate.rst [edit]
[-] list-groups-for-user.rst [edit]
[-] update-service-specific-credential.rst [edit]
[-] list-groups.rst [edit]
[-] add-user-to-group.rst [edit]
[-] list-mfa-devices.rst [edit]
[-] list-open-id-connect-providers.rst [edit]
[-] remove-role-from-instance-profile.rst [edit]
[-] list-saml-providers.rst [edit]
[-] get-policy.rst [edit]
[-] get-account-summary.rst [edit]
[-] list-service-specific-credential.rst [edit]
[-] remove-user-from-group.rst [edit]
[-] get-user.rst [edit]
[-] get-open-id-connect-provider.rst [edit]
[-] create-service-specific-credential.rst [edit]
[-] update-open-id-connect-provider-thumbprint.rst [edit]
[-] upload-signing-certificate.rst [edit]
[-] create-access-key.rst [edit]
[-] delete-group-policy.rst [edit]
[-] create-instance-profile.rst [edit]
[-] get-group-policy.rst [edit]
[-] update-assume-role-policy.rst [edit]
[-] deactivate-mfa-device.rst [edit]
[-] tag-user.rst [edit]
[-] get-ssh-public-key.rst [edit]
[-] delete-signing-certificate.rst [edit]
[-] list-instance-profiles-for-role.rst [edit]
[-] list-server-certificates.rst [edit]
[-] update-login-profile.rst [edit]
[-] update-access-key.rst [edit]
[-] update-role-description.rst [edit]
[-] list-attached-role-policies.rst [edit]
[-] list-policies.rst [edit]
[-] list-user-tags.rst [edit]
[-] list-attached-user-policies.rst [edit]