Changelog

OpenID Connect (OIDC) authentication for AWS is now generally available for Pro workspaces and higher.

Render services can use OIDC to assume an AWS IAM role at runtime, giving them secure access to AWS resources without long-lived credentials. Render automatically issues and rotates the temporary credentials used by each service.

To configure OIDC for AWS, connect Render as an identity provider in AWS IAM, create the appropriate trust relationships, and assign an IAM role to each service using the AWS_ROLE_ARN environment variable.

Get started in the documentation.