rosa-sts-aws-prereqs.adoc

_attributes/attributes-openshift-dedicated.adoc :context: rosa-sts-aws-prerequisites

AWS prerequisites for ROSA with STS

{product-title} (ROSA) provides a model that allows Red Hat to deploy clusters into a customer’s existing Amazon Web Service (AWS) account.

Ensure that the following AWS prerequisites are met before installing ROSA with STS.

modules/rosa-aws-understand.adoc

Important

When you create a ROSA cluster using AWS STS, an associated AWS OpenID Connect (OIDC) identity provider is created as well. This OIDC provider configuration relies on a public key that is located in the us-east-1 AWS region. Customers with AWS SCPs must allow the use of the us-east-1 AWS region, even if these clusters are deployed in a different region.

modules/rosa-sts-aws-requirements.adoc modules/rosa-requirements-deploying-in-opt-in-regions.adoc modules/rosa-setting-the-aws-security-token-version.adoc modules/rosa-sts-aws-iam.adoc modules/rosa-aws-provisioned.adoc

Next steps

Review the required AWS service quotas

Additional resources

• See Intial Planning Considerations for guidance on worker node count.

• See SRE access to all Red Hat OpenShift Service on AWS clusters for information about how Red Hat site reliability engineering accesses ROSA clusters.