1{
2 "type": "external_account",
3 "audience": "//iam.googleapis.com/projects/$PROJECT_NUMBER/locations/global/workloadIdentityPools/$POOL_ID/providers/$PROVIDER_ID",
4 "subject_token_type": "urn:ietf:params:aws:token-type:aws4_request",
5 "service_account_impersonation_url": "https://iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/$EMAIL:generateAccessToken",
6 "token_url": "https://sts.googleapis.com/v1/token",
7 "credential_source": {
8 "environment_id": "aws1",
9 "region_url": "http://169.254.169.254/latest/meta-data/placement/availability-zone",
10 "url": "http://169.254.169.254/latest/meta-data/iam/security-credentials",
11 "regional_cred_verification_url": "https://sts.{region}.amazonaws.com?Action=GetCallerIdentity&Version=2011-06-15",
12 "imdsv2_session_token_url": "http://169.254.169.254/latest/api/token"
13 }
14}
View as plain text