Grpc Credentials AWS IAM

This documentation is for the Envoy v3 API.

As of Envoy v1.18 the v2 API has been removed and is no longer supported.

If you are upgrading from v2 API config you may wish to view the v2 API documentation:

This extension may be referenced by the qualified name envoy.grpc_credentials.aws_iam


This extension is functional but has not had substantial production burn time, use only with this caveat.

This extension does not operate on the data plane and hence is intended to be robust against untrusted traffic.


This extension extends and can be used with the following extension category:

Configuration for AWS IAM Grpc Credentials Plugin


[config.grpc_credential.v3.AwsIamConfig proto]

  "service_name": "...",
  "region": "..."

(string, REQUIRED) The service namespace of the Grpc endpoint.

Example: appmesh


(string) The region hosting the Grpc endpoint. If unspecified, the extension will use the value in the AWS_REGION environment variable.

Example: us-west-2