> **Page index:** https://km.oslo.systems/llms.txt lists every page on this site, with a link to its Markdown version.

# `iam`

GitHub Actions OIDC identity provider and other IAM resources for the AWS account.

## Variables

| Name | Description | Type | Default | Required |
| --- | --- | --- | --- | --- |
| `MaskinportenKeyRotation` | Let Dataplatformen rotate Maskinporten client keys stored in this account. | `map` | `{"Enable": false}` | no |
| `GithubIdentityProvider` | Register GitHub Actions as an OIDC identity provider in the AWS account. Required before any template can create IAM roles that GitHub Actions assumes. Creates only the identity provider, no roles. | `map` | `{"Enable": false}` | no |
| `IamForEnvironmentCicd` | Deprecated: use the `cicd-common` template instead. Creates an IAM role that GitHub Actions in the IaC repository (`IacGitHubRepo`) can assume to deploy this environment. | `map` | `{"Enable": false, "IacGitHubRepo": null}` | no |