:_mod-docs-content-type: ASSEMBLY
[id="cert-manager-authenticate"]
= Authenticating the {cert-manager-operator}
include::_attributes/common-attributes.adoc[]
:context: cert-manager-authenticate

toc::[]

[role="_abstract"]
To enable the operator to manage components on your cloud provider, authenticate the {cert-manager-operator} by configuring cloud credentials. You can grant the Operator access to external services required for certificate issuance, such as DNS providers.

//  on AWS
include::modules/cert-manager-configure-cloud-credentials-aws-non-sts.adoc[leveloffset=+1]

// with AWS Security Token Service
include::modules/cert-manager-configure-cloud-credentials-aws-sts.adoc[leveloffset=+1]

[role="_additional-resources"]
[id="additional-resources_cert-manager-authenticate-gcp"]
.Additional resources

* xref:../../installing/installing_aws/ipi/installing-aws-customizations.adoc#cco-ccoctl-configuring_installing-aws-customizations[Configuring the Cloud Credential Operator utility]

// on GCP
include::modules/cert-manager-configure-cloud-credentials-gcp-non-sts.adoc[leveloffset=+1]

// with GCP Workload Identity
include::modules/cert-manager-configure-cloud-credentials-gcp-sts.adoc[leveloffset=+1]

[role="_additional-resources"]
[id="additional-resources_cert-manager-authenticate-gcp-workload-identity"]
.Additional resources

* xref:../../installing/installing_gcp/installing-gcp-customizations.adoc#cco-ccoctl-configuring_installing-gcp-customizations[Configuring the Cloud Credential Operator utility]

* xref:../../authentication/managing_cloud_provider_credentials/cco-short-term-creds.adoc#cco-short-term-creds[Manual mode with short-term credentials for components]

* xref:../../authentication/managing_cloud_provider_credentials/about-cloud-credential-operator.adoc#about-cloud-credential-operator-default_about-cloud-credential-operator[Default behavior of the Cloud Credential Operator]