> **Page index:** https://kmtest.yngvar-hey-dev.oslo.systems/llms.txt lists every page on this site, with a link to its Markdown version.
>
> **Beyond these docs:** Team Utviklerflyt's golden-path plugin for Claude Code answers golden path questions from the source code of the platform's templates, Terraform modules and workflows. [Golden path plugin for Claude Code](/set-up-your-machine/golden-path-plugin-for-claude-code/index.md) shows how to install it.

# `iam`

<!-- DESCRIPTION BEGIN -->
GitHub Actions OIDC identity provider and other IAM resources for the AWS account.
<!-- DESCRIPTION END -->

<!-- BOILERPLATE BEGIN -->
<!-- Generated by running `make docs` from the `boilerplate` dir) -->
<!-- Updated automatically in release PRs -->

## Variables

|          Name           |                                                                                             Description                                                                                             |Type |                  Default                   |Required|
|-------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----|--------------------------------------------|--------|
|`MaskinportenKeyRotation`|Let Dataplatformen rotate Maskinporten client keys stored in this account.                                                                                                                           |`map`|``{"Enable": false}``                       |no      |
|`GithubIdentityProvider` |Register GitHub Actions as an OIDC identity provider in the AWS account. Required before any template can create IAM roles that GitHub Actions assumes. Creates only the identity provider, no roles.|`map`|``{"Enable": false}``                       |no      |
|`IamForEnvironmentCicd`  |Deprecated: use the `cicd-common` template instead. Creates an IAM role that GitHub Actions in the IaC repository (`IacGitHubRepo`) can assume to deploy this environment.                           |`map`|``{"Enable": false, "IacGitHubRepo": null}``|no      |

<!-- BOILERPLATE END -->