:_mod-docs-content-type: ASSEMBLY
[id="bound-service-account-tokens"]
= Using bound service account tokens
include::_attributes/common-attributes.adoc[]
:context: bound-service-account-tokens

toc::[]

You can use bound service account tokens, which improves the ability to integrate with cloud provider identity access management (IAM) services, such as {product-title} on AWS IAM or Google Cloud Platform IAM.

// About bound service account tokens
include::modules/bound-sa-tokens-about.adoc[leveloffset=+1]

// Configuring bound service account tokens using volume projection
include::modules/bound-sa-tokens-configuring.adoc[leveloffset=+1]

// Creating bound service account tokens outside the pod
include::modules/bound-sa-tokens-configuring-externally.adoc[leveloffset=+1]

[role="_additional-resources"]
.Additional resources

// This xref target does not exist in the OSD/ROSA docs.
ifndef::openshift-dedicated,openshift-rosa[]
* xref:../nodes/nodes/nodes-nodes-rebooting.adoc#nodes-nodes-rebooting-gracefully_nodes-nodes-rebooting[Rebooting a node gracefully]
endif::openshift-dedicated,openshift-rosa[]

* xref:../authentication/understanding-and-creating-service-accounts.adoc#service-accounts-managing_understanding-service-accounts[Creating service accounts]

// TODO: Verify distros: openshift-enterprise,openshift-webscale,openshift-origin