Prerequisites
Before you create a Cloud Connector, complete the following prerequisites on both the Amazon side and the Azure side. These steps establish OIDC-based federated authentication between Amazon and Microsoft Azure.
Note
The manual Azure prerequisites in Azure prerequisites apply to the Amazon CLI path only. If you create a Cloud Connector in the Amazon Web Services Management Console, the wizard generates a setup script that performs this Azure-side setup for you. For more information, see Create a Cloud Connector (Amazon Web Services Management Console).
Important
Make sure your Amazon Web Services account is not in any service control policy (SCP) that
restricts the sts:GetWebIdentityToken action.