Back to Integrations
OIDC
Authenticate env zero to your cloud or Vault with short-lived OIDC tokens instead of stored keys
Integration
%25202%2520(2).svg)
category
Identity and Access Management
Overview
OpenID Connect lets env zero authenticate to AWS, Azure, GCP, or HashiCorp Vault using short-lived tokens instead of long-lived stored credentials. Each deployment gets a fresh, scoped token, removing the need to manage static cloud keys.
How it works
You set up a trust relationship between your cloud or Vault and env zero once. At deploy time, env zero issues a signed JWT that your provider exchanges for temporary access, so credentials are never stored and expire automatically after each run.
%25203.svg)
%25202%2520(6).svg)
%25202%2520(7).svg)
%25203%2520(1).svg)
.svg)
%25202%2520(8).svg)
