// Module included in the following assemblies:
//
// Hosted control plane assemblies
// * hosted_control_planes/hcp-authentication-authorization.adoc

:_mod-docs-content-type: PROCEDURE
[id="hcp-cco-verify-aws-sts_{context}"]
= Verifying the CCO installation in a hosted cluster on {aws-short}

You can verify that the Cloud Credential Operator (CCO) is running correctly in your hosted control plane.

.Prerequisites

* You configured the hosted cluster on {aws-first}.

.Procedure

. Verify that the CCO is configured in a manual mode in your hosted cluster by running the following command:
+
[source,terminal]
----
$ oc get cloudcredentials <hosted_cluster_name> \
  -n <hosted_cluster_namespace> \
  -o=jsonpath={.spec.credentialsMode}
----
+
.Expected output
[source,terminal]
----
Manual
----

. Verify that the value for the `serviceAccountIssuer` resource is not empty by running the following command:
+
[source,terminal]
----
$ oc get authentication cluster --kubeconfig <hosted_cluster_name>.kubeconfig \
  -o jsonpath --template '{.spec.serviceAccountIssuer }'
----
+
.Example output
[source,terminal]
----
https://aos-hypershift-ci-oidc-29999.s3.us-east-2.amazonaws.com/hypershift-ci-29999
----