strato-cloud/Get StratoCloud Credentials
Get ephemeral workload JIT credentials from StratoCloud using GitHub OIDC
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| environment | Cloud environment identifier (e.g., AWS account ID, Azure subscription ID, GCP project ID) | yes | — |
| role | The name of the Role associated with the credentials (e.g., ReadOnly, SecurityOperator, PowerUser, Administrator) | yes | — |
| tenant_id | StratoCloud tenant ID (used in audience for token exchange) | yes | — |
| duration | The duration the credentials should be valid for (e.g., 1h, 30m) | no | 1h |
| reason | Optional reason for requesting credentials (included in StratoCloud audit context) | no | — |
| auth_url | StratoCloud auth service URL | no | https://api.preview.strato-cloud.io/auth |
| access_url | StratoCloud access service URL | no | https://api.preview.strato-cloud.io/access |
| set_env | Set credentials as environment variables (true/false) | no | true |
Outputs
| name | description |
|---|---|
| access_key_id | AWS Access Key ID (AWS only) |
| secret_access_key | AWS Secret Access Key (AWS only) |
| session_token | AWS Session Token (AWS only) |
| guest_user_email | Azure guest user email (Azure only) |
| tap | Azure Time-based Access Password (Azure only) |
| tenant_id_output | Azure tenant ID (Azure only) |
| subscription_id | Azure subscription ID (Azure only) |
| expiration | Credential expiration timestamp |
| credentials_json | Full credentials as JSON string |